29e65fade92e2c7a6297fde13528d838_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

29e65fade92e2c7a6297fde13528d838_JaffaCakes118
Size

63KB
MD5

29e65fade92e2c7a6297fde13528d838
SHA1

36571d978f4fa32418f0797a486f65a1c1bf3720
SHA256

e7535f23afbfb71725a4fed8ef89253b4627deec09076d4e82edf262d4bea713
SHA512

ee15923927854f8c6497fa300d2679843ab71ce6df437b4ca52b371cfe0624ff094d1526c4f64a36c04b15884e78e9151473f0d968fd6a447a7f437d34d5a4dc
SSDEEP

768:UtMJ21h7OCKq5Ka4z+C2kp9L/rIAKbHVaJOzuqrdqzd92TzGSL6vM1hMqrG5mihT:aT7nX5Ka4zS8lzI16so92T/sB5mih

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
29e65fade92e2c7a6297fde13528d838_JaffaCakes118

Files

29e65fade92e2c7a6297fde13528d838_JaffaCakes118
.exe windows:5 windows x86 arch:x86

76c69d4e83b3f6e0a2159bc2ad708a0e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

strlen
_ftol
??1type_info@@UAE@XZ
__p__osver
ceil
swscanf
_access
_strlwr
qsort
_ltow
_wcslwr
wcstok
_wcsupr
free
__getmainargs
_itoa
??0exception@@QAE@ABV0@@Z
_beginthreadex
_tell
_commit
_chsize
wcstoul
srand
_CIacos
__initenv
printf
_write
wcscpy
mbstowcs
_CxxThrowException
??3@YAXPAX@Z
fopen
__set_app_type

ole32

OleInitialize
GetRunningObjectTable
CreateStreamOnHGlobal
StringFromIID
OleRegGetMiscStatus
MkParseDisplayName
CreateBindCtx
GetHGlobalFromStream
CoGetInterfaceAndReleaseStream
StgCreateDocfileOnILockBytes
CoUnmarshalInterface
OleUninitialize
StgCreateDocfile
GetClassFile
CoTaskMemFree
CoCreateInstance
OleSaveToStream
CoGetMalloc
CoImpersonateClient
StringFromGUID2
StringFromCLSID
CoDisconnectObject
IIDFromString

kernel32

InterlockedIncrement
GetLocalTime
LocalAlloc
WideCharToMultiByte
GetCurrentProcessId
SetUnhandledExceptionFilter
InitializeCriticalSection
MulDiv
EnterCriticalSection
IsValidCodePage
GetCommandLineA
LoadLibraryA
VirtualAlloc
InterlockedDecrement
GetCurrentThreadId
GetCurrentProcess
ExitProcess
lstrcmpiW
GetFileSize
GetOEMCP
FlushFileBuffers
SetFilePointer
GetVersionExA
LeaveCriticalSection
FindClose
FindNextFileA

user32

GetMenuItemCount
GetSysColorBrush
wsprintfW
SystemParametersInfoW
RegisterClipboardFormatW
GetForegroundWindow
CheckRadioButton
SetMenu
GetMenu
SetRect
DragObject
IsZoomed
DefWindowProcW
GetWindowRect
BeginPaint
GetPropA
InvalidateRect
SendDlgItemMessageW
GetWindowLongA
GetMessageA
GetCursorPos
GetActiveWindow
EnableWindow
DrawFocusRect
GetWindowLongW
FindWindowA
CreateWindowExW
SetForegroundWindow
IsIconic
PtInRect
SetFocus
FindWindowW
GetDC

version

GetFileVersionInfoSizeA
GetFileVersionInfoSizeW

comdlg32

PrintDlgA
ChooseColorW
PageSetupDlgA
GetOpenFileNameW
GetFileTitleA
FindTextA
ChooseFontA
GetFileTitleW
FindTextW
ChooseColorA
ChooseFontW
CommDlgExtendedError
PrintDlgW
PrintDlgExW
GetOpenFileNameA

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 20KB - Virtual size: 81KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

76c69d4e83b3f6e0a2159bc2ad708a0e

Headers

File Characteristics

Imports

msvcrt

ole32

kernel32

user32

version

comdlg32

Sections

.text Size: 9KB - Virtual size: 8KB

.rdata Size: 33KB - Virtual size: 32KB

.idata Size: 20KB - Virtual size: 81KB

.text
Size: 9KB - Virtual size: 8KB

.rdata
Size: 33KB - Virtual size: 32KB

.idata
Size: 20KB - Virtual size: 81KB