24463ca5f317f080f05f1b05724dde31_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

24463ca5f317f080f05f1b05724dde31_JaffaCakes118
Size

452KB
MD5

24463ca5f317f080f05f1b05724dde31
SHA1

75f6077750bcc2b55b3cf68cc2590e5503614e71
SHA256

cec4ff16ecb97d375b2f1ce5c05e63172014f85dcd54480a5792756998ebb523
SHA512

d880c32f6bf2b792bb67b27bb9cfe1718b21285bae3b868307d357f8c3f5e7077c10ac5e8d52b5e030db8c1aaa27050c126fa47d110a2ae1c0ae6bcf4525703c
SSDEEP

6144:UANJR7M1O0/SXmov8LsOO3ug9YrvRLlgeH5pkkvG:D5Xmovd/kv1a/kvG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
24463ca5f317f080f05f1b05724dde31_JaffaCakes118

Files

24463ca5f317f080f05f1b05724dde31_JaffaCakes118
.exe windows:4 windows x86 arch:x86

67552167529ddea00a699d26fee08718

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

gdi32

GetPath
GetBitmapBits
AnimatePalette
RoundRect
PolyBezier
SetStretchBltMode
ExtCreatePen
CreatePen
FlattenPath
PlgBlt
SetTextColor
CreateFontIndirectA
StrokePath
GetBkColor
SetDIBits

user32

DrawEdge
EmptyClipboard
ToAscii
DestroyCursor
WinHelpW
CallNextHookEx
ChildWindowFromPoint
MonitorFromWindow
IsClipboardFormatAvailable
GetSysColorBrush
SetScrollRange
SetWindowPos
UnhookWindowsHookEx
SetClipboardData
DestroyIcon
ClipCursor
DefWindowProcW
SetWindowsHookExW
RegisterClassW
GetSysColor

shlwapi

PathCanonicalizeW
PathStripToRootW
PathIsRelativeW
PathIsURLW
PathIsRootW
PathCombineW

kernel32

SetEndOfFile
GetVersionExW
CreateFiberEx
IsDBCSLeadByte
GetProfileStringW
FileTimeToLocalFileTime
FlushFileBuffers
GetUserDefaultLangID
SetCommConfig
LockFile
GetFileTime
UnlockFile
FileTimeToSystemTime
EnumResourceNamesW
FlushFileBuffers
GetFileAttributesA
SearchPathW
FindResourceExA
GetVolumeInformationW
CompareStringW
GetSystemTime
VerLanguageNameW
LocalAlloc
GetFileType
GetSystemDirectoryW

ole32

CoGetMalloc
CLSIDFromProgID
RegisterDragDrop
ReleaseStgMedium
CoTaskMemAlloc
CreateStreamOnHGlobal
OleDuplicateData
CoFreeUnusedLibraries
ProgIDFromCLSID
CLSIDFromString
StgOpenStorageOnILockBytes
StringFromCLSID
OleRegGetUserType
OleRun
CoTaskMemFree
GetHGlobalFromILockBytes
CoGetClassObject
OleGetAutoConvert
CoCreateInstance
CoCreateGuid
GetHGlobalFromStream
RevokeDragDrop
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal

rpcrt4

RpcBindingFromStringBindingA
RpcBindingSetAuthInfoA
NdrClientCall
RpcStringBindingComposeA
RpcStringFreeA

comctl32

ImageList_Create
ImageList_Add
ImageList_DrawEx
ImageList_GetIconSize
ImageList_Destroy

comdlg32

GetFileTitleA

Sections

.text
Size: 175KB - Virtual size: 175KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.lib
Size: 253KB - Virtual size: 256KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

67552167529ddea00a699d26fee08718

Headers

File Characteristics

Imports

gdi32

user32

shlwapi

kernel32

ole32

rpcrt4

comctl32

comdlg32

Sections

.text Size: 175KB - Virtual size: 175KB

.rdata Size: 3KB - Virtual size: 2KB

.data Size: 19KB - Virtual size: 18KB

.lib Size: 253KB - Virtual size: 256KB

.text
Size: 175KB - Virtual size: 175KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 19KB - Virtual size: 18KB

.lib
Size: 253KB - Virtual size: 256KB