313f4a59e8342281bcbd1f7c83099a50_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

313f4a59e8342281bcbd1f7c83099a50_JaffaCakes118
Size

443KB
MD5

313f4a59e8342281bcbd1f7c83099a50
SHA1

a7ee360917aa6748de15203f143c08d24eb6ebc7
SHA256

03e920b001c57055482af079c2954e247903a710377afb45c7fb3ce9b9c169a6
SHA512

9ceae2e8dca823625dbdf512b3f0f3b98f2134f179fe56a9873660cde32809e91318fb549cf837395711f8194f6aa4f47c487d94cd9b4d8fc97248bdfa179423
SSDEEP

6144:+gINwpbO5+g0QruhKCV5Lec/y1uSwWN+AGHEU8/+OFp3edGcH7FE+xC7bmplDDN:cNn+g0YK/KuSwdVHEcOFxedbFEQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
313f4a59e8342281bcbd1f7c83099a50_JaffaCakes118

Files

313f4a59e8342281bcbd1f7c83099a50_JaffaCakes118
.exe windows:5 windows x86 arch:x86

b57bc9038f88c44d34da604d7c944c75

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

gdi32

CreateCompatibleBitmap
LineTo
SetROP2
CreateFontIndirectW
CreateSolidBrush
SetBkMode
SetBrushOrgEx
BitBlt
SelectPalette
Arc
SetTextColor
StretchBlt
CreateCompatibleDC
RealizePalette
SetStretchBltMode
GetObjectW

ole32

CoRegisterClassObject
StringFromCLSID
CoInitialize
CoTaskMemFree
FreePropVariantArray
CoAllowSetForegroundWindow
CreateStreamOnHGlobal

msvcrt

realloc
wcsncpy
__set_app_type
??1type_info@@UAE@XZ
_adjust_fdiv
__RTDynamicCast
__setusermatherr
_cexit
_exit
_initterm

shell32

ShellExecuteW
ExtractIconExW
SHGetPathFromIDListW
ord16
SHGetFileInfoW
ord152
SHParseDisplayName

shlwapi

PathRemoveFileSpecW
wnsprintfW
ord186
StrCpyNW

gdiplus

GdipImageRotateFlip
GdipGetImageDecodersSize
GdipGetImageHeight
GdiplusShutdown
GdipLoadImageFromFile
GdipGetImageEncoders
GdiplusStartup

user32

OffsetRect
GetWindowTextLengthW
SetCursor
ReleaseDC
SetFocus
InflateRect
IsWindowEnabled
GetLastActivePopup
GetDC
CopyIcon
GetForegroundWindow
ShowWindow
GetClassInfoW
DispatchMessageW
EnableWindow
CharNextW
SetDlgItemTextW
SendMessageW
GetWindowRect
IntersectRect
GetWindowThreadProcessId
ReleaseCapture
DefWindowProcW
LoadIconW
SendDlgItemMessageW
GetPropW
CallWindowProcW
wsprintfW
WinHelpW
MessageBeep
PostMessageW
TranslateAcceleratorW
RemovePropW

advapi32

RegEnumKeyExW
RegSetValueExW
RegCreateKeyExW
RegDeleteValueW
OpenSCManagerW

kernel32

WaitForSingleObject
GetTickCount
CreateProcessW
FindFirstFileW
GetModuleFileNameW
MoveFileW
GetShortPathNameW
FindResourceW
GetCurrentProcess
HeapDestroy
CreateDirectoryW
GetWindowsDirectoryW
GetTickCount
CloseHandle
FindClose
GetProcAddress
GetDateFormatW
GetLastError
lstrlenW
QueryPerformanceCounter
GlobalAlloc
UnhandledExceptionFilter
GetModuleHandleA
DuplicateHandle
GetHandleInformation
TerminateProcess
ReleaseMutex
lstrcpyW
CreateEventA
WaitForSingleObject
VirtualAllocEx
LeaveCriticalSection
InterlockedDecrement

Sections

.text
Size: 404KB - Virtual size: 404KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 328KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b57bc9038f88c44d34da604d7c944c75

Headers

DLL Characteristics

File Characteristics

Imports

gdi32

ole32

msvcrt

shell32

shlwapi

gdiplus

user32

advapi32

kernel32

Sections

.text Size: 404KB - Virtual size: 404KB

.data Size: 31KB - Virtual size: 31KB

.rsrc Size: 6KB - Virtual size: 328KB

.text
Size: 404KB - Virtual size: 404KB

.data
Size: 31KB - Virtual size: 31KB

.rsrc
Size: 6KB - Virtual size: 328KB