2e13f574199fb6835c2c64028656464b_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

2e13f574199fb6835c2c64028656464b_JaffaCakes118
Size

146KB
MD5

2e13f574199fb6835c2c64028656464b
SHA1

465560af8c029f7beb18c2d070adc501ac28b4da
SHA256

83e0ac28813cba610b674c2f51c6b050814ac1432511cd8d417665180e54a61b
SHA512

ccf358bf2b6e6c19983568c68b92df22e309a744651679a212d37daa37f212522b9b5b068ed4e7625360bb0210e83b39b9cf287aaa6b0eaf941e6ce94559e712
SSDEEP

3072:Nbm0wup5rDNmmZWM0Rr2IsQo/l5KLTCY3R6h6vf0W0ugxyzqwcg3F+RlpppSK:NbmQnNz/0t2IsQod5cHBCAf0Y3qwJIRV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2e13f574199fb6835c2c64028656464b_JaffaCakes118

Files

2e13f574199fb6835c2c64028656464b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4b9b1691bad02d7ba6f1d073025a868c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegCreateKeyA
RegCreateKeyExA

kernel32

SetHandleCount
GlobalFindAtomA
GetOEMCP
GetVersion
GetCommandLineA
VirtualAlloc
VirtualAllocEx
LoadLibraryExA
HeapDestroy
LoadLibraryA
GlobalDeleteAtom
MoveFileExA
MulDiv
GetDateFormatA
GetCurrentThreadId
LocalAlloc
MoveFileA
FreeLibrary
GetStringTypeA
GetFileAttributesA
GetStartupInfoA
ExitProcess
lstrlenW

user32

CharNextW
SetWindowTextA
DrawAnimatedRects
IsWindowUnicode
GetSystemMenu
MoveWindow
InsertMenuItemA
TranslateMessage
DestroyWindow
ShowWindow
GetWindowThreadProcessId
ShowOwnedPopups
RegisterClipboardFormatA
DestroyCursor
DrawIcon
GetPropA
IsZoomed
GetTopWindow
CloseClipboard
GetCapture
SetCapture
DispatchMessageA
GetWindowLongA
CreateIcon
GetScrollPos
DefFrameProcA
GetClipboardData
GetLastActivePopup
MessageBoxA
MapVirtualKeyA
PeekMessageA
GetMenuItemInfoA
UnhookWindowsHookEx
CreateMenu
EnableMenuItem
EqualRect
GetMenu
GetKeyboardLayoutNameA
GetMenuItemCount
CallWindowProcA
GetClassInfoA
ClientToScreen
LoadIconA
GetMenuState
IsChild
GetScrollRange
GetWindowDC
KillTimer
SetForegroundWindow
DrawFrameControl
MsgWaitForMultipleObjects
SetRect
IsCharLowerA
GetKeyNameTextA
GetSysColorBrush
SetWindowsHookExA
SetActiveWindow
GetDesktopWindow
DrawMenuBar
SendMessageA
GetSysColor
DrawIconEx
PtInRect
BeginPaint

comctl32

ImageList_GetBkColor
ImageList_Read
ImageList_Remove
ImageList_DragShowNolock
ImageList_Destroy
ImageList_DrawEx

Exports

Exports

0LoSF@24

Sections

.text
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 118KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 96KB - Virtual size: 95KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.badata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4b9b1691bad02d7ba6f1d073025a868c

Headers

File Characteristics

Imports

advapi32

kernel32

user32

comctl32

Exports

Exports

Sections

.text Size: 24KB - Virtual size: 24KB

.rdata Size: 10KB - Virtual size: 118KB

.data Size: 96KB - Virtual size: 95KB

.edata Size: 3KB - Virtual size: 3KB

.badata Size: 2KB - Virtual size: 1KB

.rsrc Size: 8KB - Virtual size: 8KB

.text
Size: 24KB - Virtual size: 24KB

.rdata
Size: 10KB - Virtual size: 118KB

.data
Size: 96KB - Virtual size: 95KB

.edata
Size: 3KB - Virtual size: 3KB

.badata
Size: 2KB - Virtual size: 1KB

.rsrc
Size: 8KB - Virtual size: 8KB