30fe2cca4de8cbce87298b2b155c2151_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

30fe2cca4de8cbce87298b2b155c2151_JaffaCakes118
Size

95KB
MD5

30fe2cca4de8cbce87298b2b155c2151
SHA1

9fe9b0dc66af642dbdf2167422386cd7460bc302
SHA256

d3d7ade829355649aedf2e800e85fa573aa30b318216c63ee75daa15fc8f6c64
SHA512

d47b4dd5544803f49395a3b0bb57ae1c54b0883d90063b63c8f6c6c300c2bd25dfcd248b1163c42d581bd891931835dd86019298f9b511a761dcaf374359152a
SSDEEP

1536:DYlenMTi1/1TETazzi5i1VLOV4yUd3co4Zp0/czRgSDq9fAdwdtI53w4O:MHTETGaXgi3MUd3JCCULW9YEINw4O

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
30fe2cca4de8cbce87298b2b155c2151_JaffaCakes118

Files

30fe2cca4de8cbce87298b2b155c2151_JaffaCakes118
.exe windows:5 windows x86 arch:x86

94d749606cc4edaa79da92a401fb0aa6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

malloc
memset

wininet

InternetCloseHandle
InternetOpenA

shell32

ord747

ole32

CoGetClassObject
CoTaskMemFree
CoGetMalloc
CoTaskMemAlloc

msimg32

GradientFill

kernel32

CompareStringA
CloseHandle
WriteProcessMemory
OpenProcess
WriteFile
MoveFileA
CreateMutexA
WaitForMultipleObjects
ReleaseMutex
HeapAlloc
GetProcessHeap
ExitProcess
HeapFree
LoadLibraryA

user32

SetWindowLongA
InvalidateRect
DrawEdge
CreateMenu
GetWindowInfo
LoadBitmapA
GetWindowRect
GetWindowLongA
ShowWindow
PostMessageA
DrawTextA
GetDC
ReleaseDC
GetActiveWindow
DestroyWindow
SetWindowTextA
DrawFrameControl
GetWindow
MoveWindow
GetForegroundWindow
CreateWindowExA
ModifyMenuA

gdi32

ExtFloodFill
DrawEscape
DeleteDC
InvertRgn
CreateFontIndirectA
SelectObject
PolyDraw
BeginPath
ExtCreatePen
GetPath
CreateDIBPatternBrush
CreateCompatibleDC
CreateCompatibleBitmap
ExtCreateRegion
EndPath
PathToRegion
ExtTextOutA
GetBitmapBits
SetBitmapBits
BitBlt
CreateFontIndirectW
CreateBitmap
CreateDCA
DeleteObject

Exports

Exports

_ShowMeSomething@16

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.cdata
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 84KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 366B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

94d749606cc4edaa79da92a401fb0aa6

Headers

DLL Characteristics

File Characteristics

Imports

msvcrt

wininet

shell32

ole32

msimg32

kernel32

user32

gdi32

Exports

Exports

Sections

.text Size: 6KB - Virtual size: 6KB

.rdata Size: 2KB - Virtual size: 2KB

.cdata Size: 1024B - Virtual size: 1024B

.rsrc Size: 84KB - Virtual size: 84KB

.reloc Size: 512B - Virtual size: 366B

.text
Size: 6KB - Virtual size: 6KB

.rdata
Size: 2KB - Virtual size: 2KB

.cdata
Size: 1024B - Virtual size: 1024B

.rsrc
Size: 84KB - Virtual size: 84KB

.reloc
Size: 512B - Virtual size: 366B