3aca979e831a7f890b0f1323ccc97ef1_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

3aca979e831a7f890b0f1323ccc97ef1_JaffaCakes118
Size

186KB
MD5

3aca979e831a7f890b0f1323ccc97ef1
SHA1

4652a2312532d3c8f0b1cb03d074e74876d37f57
SHA256

039f302d0da72d2c8e8073ce4451d85795683b6a536247d9efa96db78a7a22b8
SHA512

2daf629861835c535c3b76156b65473b84843bc88ec152dc7b35521595621d722ffd2d72659f154ef6feb4066dd306f870284f1753aa2c06eeeaefb6336f34be
SSDEEP

3072:YFAbtDFu3QuBjoHvbpYDKR9Ozk7+DmaYGDgKcn+c1iAo/VqKbPULC:YFktk3XoTWAOzkMZs8nP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3aca979e831a7f890b0f1323ccc97ef1_JaffaCakes118

Files

3aca979e831a7f890b0f1323ccc97ef1_JaffaCakes118
.dll windows:4 windows x86 arch:x86

9aa36a8cd9249ec61d8e4823a33124d8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

shlwapi

SHSetValueA

gdi32

GetBkColor
SelectPalette

user32

GetWindow
GetClassNameA
SetWindowPlacement
CharLowerBuffA
DrawAnimatedRects
IsWindowUnicode
MapVirtualKeyA
CharToOemA
PostQuitMessage
SetPropA
SetCapture
EnableScrollBar
GetFocus
MessageBeep
IsMenu
LoadBitmapA
SetWindowsHookExA
GetMenuItemInfoA
GetWindowLongW
CreateIcon
EnumThreadWindows
GetClipboardData
IsCharLowerA
ShowOwnedPopups
RemoveMenu
InsertMenuItemA
GetScrollRange
CreateWindowExA
SetScrollRange
SetForegroundWindow
WindowFromPoint
ClientToScreen
IsDlgButtonChecked
GetWindowTextA
GetClientRect
GetKeyNameTextA
SetScrollInfo
CharNextW
GetWindowPlacement
GetIconInfo
DrawFrameControl
IsRectEmpty
CharNextA
OffsetRect
LoadIconA
CreateMenu
EndDialog
IsIconic
EmptyClipboard
UnregisterClassA
SetActiveWindow
GetMenuState
DrawIconEx
CheckMenuItem
SetParent
SetClipboardData
GetMenu
GetTopWindow
wsprintfA
GetDlgItem
TranslateMessage

kernel32

GetCPInfo
SetThreadLocale
GetModuleHandleA
GetCurrentThreadId
WaitForSingleObject
WideCharToMultiByte
GetDateFormatA
CreateEventA
CreateFileA
GetCommandLineW
SetFilePointer
SetErrorMode
VirtualAllocEx
LoadLibraryA
GetTickCount
HeapFree
VirtualFree
CreateThread
ExitProcess
GetProcAddress
GetStdHandle
GetThreadLocale

Exports

Exports

gD34I6A
0LhgMu3ChPDc3@16
eFI7uvlt
_SsuhfPH6_
_MekBI3m_wmAf@24
41GDQYdQNvWl@24
LGaAh_fh80@16
aM9AkHHsa3
_DZYWXAOB@16
_k9Bf4ro@16
_YwN3xqK@20

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 156KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 150KB - Virtual size: 149KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.abdata
Size: 512B - Virtual size: 252B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 512B - Virtual size: 304B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9aa36a8cd9249ec61d8e4823a33124d8

Headers

File Characteristics

Imports

shlwapi

gdi32

user32

kernel32

Exports

Exports

Sections

.text Size: 9KB - Virtual size: 9KB

.rdata Size: 9KB - Virtual size: 156KB

.data Size: 150KB - Virtual size: 149KB

.abdata Size: 512B - Virtual size: 252B

.edata Size: 512B - Virtual size: 304B

.rsrc Size: 14KB - Virtual size: 13KB

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 9KB - Virtual size: 9KB

.rdata
Size: 9KB - Virtual size: 156KB

.data
Size: 150KB - Virtual size: 149KB

.abdata
Size: 512B - Virtual size: 252B

.edata
Size: 512B - Virtual size: 304B

.rsrc
Size: 14KB - Virtual size: 13KB

.reloc
Size: 2KB - Virtual size: 1KB