243a8aef009f020ffaaaadd19aa0c2a8_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

243a8aef009f020ffaaaadd19aa0c2a8_JaffaCakes118
Size

210KB
MD5

243a8aef009f020ffaaaadd19aa0c2a8
SHA1

03c634eef9fe542a70b7160d5e1383d80695770f
SHA256

1635de964cd9e4a1ff1d8befdc84ef2ed5dfd4bbea89d35a2f226f8efbc6c884
SHA512

29bcfb7414a34f6640f4c502df49c360e4a0c9af30032bb8e4ae9b646341e5e4cb03e4347e4684ba1e7b12e7b27e284af61c1791c67fb8001f9c3ffd6cb01cac
SSDEEP

3072:NLDDMz0d8tzM+9AB+A4cf48TCwdh4FOgVExMMpgGULHZwj:NDo08tzM+9yTpww6xSxMMphc5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
243a8aef009f020ffaaaadd19aa0c2a8_JaffaCakes118

Files

243a8aef009f020ffaaaadd19aa0c2a8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

dc79f22180a76491fabfc0ea8fd40ce7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

shlwapi

SHSetValueA
SHDeleteValueA

kernel32

GetACP
GetProcAddress
GetModuleHandleA
VirtualAllocEx
VirtualAlloc
ExitProcess
GetVersionExA
IsBadReadPtr
LocalAlloc
LoadLibraryA
lstrlenA
ExitThread

advapi32

RegEnumKeyA

gdi32

GetObjectA
GetDIBits
CreateBitmap
CreateDIBitmap
GetClipBox

user32

SetCursor
EndPaint
SetScrollInfo
SetForegroundWindow
IsChild
MsgWaitForMultipleObjects
GetSubMenu
CharNextW
RegisterClassA
GetKeyboardLayoutList
FindWindowA
DispatchMessageW
TrackPopupMenu
BeginPaint
IntersectRect
DrawMenuBar
DispatchMessageA
GetTopWindow
CallNextHookEx
SendMessageW
SetWindowLongW
EnumThreadWindows
PostMessageA
EnableWindow
RedrawWindow
DrawIconEx
GetCapture
EnableScrollBar
GetCursor
OemToCharA
OffsetRect
GetWindowLongA
CharLowerA
IsWindowEnabled
GetMenuState
GetClassNameA
LoadBitmapA
DrawAnimatedRects
IsWindowUnicode
InflateRect
SetScrollPos
SendMessageA
CharUpperBuffA
GetMenuItemInfoA
SetParent
GetSystemMetrics
DefMDIChildProcA
DestroyCursor
SetMenu
RegisterClipboardFormatA
GetKeyNameTextA
WindowFromPoint
GetSysColorBrush
GetScrollPos
CreateWindowExA
GetDesktopWindow
LoadStringA
GetIconInfo
GetWindowRect
GetWindowThreadProcessId
SetActiveWindow
CloseClipboard
GetScrollInfo
IsRectEmpty
MapVirtualKeyA
GetMenuItemCount
CheckMenuItem
SetMenuItemInfoA
GetSysColor
GetDCEx
DrawTextA
PostQuitMessage

Sections

.text
Size: 63KB - Virtual size: 62KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 457B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RSRC8
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RSRC0
Size: 136KB - Virtual size: 136KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.RSRC6
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.RSRC3
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RSRC4
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 992B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

dc79f22180a76491fabfc0ea8fd40ce7

Headers

File Characteristics

Imports

shlwapi

kernel32

advapi32

gdi32

user32

Sections

.text Size: 63KB - Virtual size: 62KB

DATA Size: 512B - Virtual size: 457B

.RSRC8 Size: 1KB - Virtual size: 1KB

.RSRC0 Size: 136KB - Virtual size: 136KB

.RSRC6 Size: 2KB - Virtual size: 2KB

.RSRC3 Size: 2KB - Virtual size: 1KB

.RSRC4 Size: 1KB - Virtual size: 1KB

.rsrc Size: 1024B - Virtual size: 992B

.text
Size: 63KB - Virtual size: 62KB

DATA
Size: 512B - Virtual size: 457B

.RSRC8
Size: 1KB - Virtual size: 1KB

.RSRC0
Size: 136KB - Virtual size: 136KB

.RSRC6
Size: 2KB - Virtual size: 2KB

.RSRC3
Size: 2KB - Virtual size: 1KB

.RSRC4
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 1024B - Virtual size: 992B