37cd41905fa16f073dd7fdae4f94e826_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

37cd41905fa16f073dd7fdae4f94e826_JaffaCakes118
Size

146KB
MD5

37cd41905fa16f073dd7fdae4f94e826
SHA1

e2a25d0f78d7bea2cef554074ad4b5f7612bed37
SHA256

2deff7ccf5bceb9487e53e9f0ab9c670f5f7b59c6fc4cde0b1e9ac071289b49f
SHA512

6692e576b6f2aa6843909769d4d9ed08515ffdb9da1abd347c17554fb19672fc501e23753e4dbebb6b8f100deb9ed8e9b3de336af48de40f2e6be26a97609fe0
SSDEEP

3072:GpygQLJUHPBZOYL9qg+PY//hbKT43jW6D90d:yrQeHPBkYZqHAxD3PD9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
37cd41905fa16f073dd7fdae4f94e826_JaffaCakes118

Files

37cd41905fa16f073dd7fdae4f94e826_JaffaCakes118
.exe windows:5 windows x86 arch:x86

09d2d3ca61fee27b719240884d863c9e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ntdll

wcsncmp
_vsnwprintf

shlwapi

StrCpyW
PathStripToRootW
PathCanonicalizeA
StrFormatByteSizeW
StrFormatKBSizeW

shell32

ord750

kernel32

TlsGetValue
SetCommBreak
SetFileTime
SetHandleCount
SetupComm
BindIoCompletionCallback
DeleteTimerQueue
CreateEventW
GetProfileStringA
CancelIo
RequestDeviceWakeup
OpenEventW
SetVolumeLabelA
FileTimeToDosDateTime
SetProcessWorkingSetSize
CreateDirectoryA
LoadLibraryW
SleepEx
CreateMutexA
lstrcmpiW
GetLogicalDriveStringsA
DisconnectNamedPipe
FatalAppExitW

user32

RealGetWindowClassW
DestroyAcceleratorTable
InvertRect
EnumPropsW
LookupIconIdFromDirectory
GetDlgItemTextA
DlgDirListW
GetMenuInfo
SetMenu
GetLastInputInfo
GetCursorPos
ScrollWindow
GetDCEx
TileWindows
IntersectRect
GetDC
EnumWindows
LoadBitmapA
CopyImage
DialogBoxIndirectParamW
KillTimer
IsCharUpperA
LoadMenuIndirectA
GetRawInputData
GetClientRect
ExitWindowsEx
TranslateMessage
EnumPropsA
PeekMessageW
GetListBoxInfo
GetTabbedTextExtentA
GetMenuContextHelpId
ShowScrollBar
PostThreadMessageW
MessageBoxW
MapWindowPoints
ExcludeUpdateRgn
DispatchMessageW
GetClassNameW
CreateAcceleratorTableW
DrawTextExW

gdi32

ExtTextOutA
RealizePalette
AbortPath
EnumEnhMetaFile
SetLayout
CreateBitmapIndirect
GetTextExtentPointI
GetTextExtentPointW
GetMetaRgn
GetOutlineTextMetricsA
SetMetaFileBitsEx
AnimatePalette
GetBitmapBits
GetBrushOrgEx
ScaleWindowExtEx

advapi32

AddAce
CopySid
IsValidAcl
IsTextUnicode
AddAuditAccessAceEx

Exports

Exports

__EnableScrollBar@12

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.extext
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 364B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bmem
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedat
Size: 512B - Virtual size: 504B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 124KB - Virtual size: 123KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

09d2d3ca61fee27b719240884d863c9e

Headers

File Characteristics

Imports

ntdll

shlwapi

shell32

kernel32

user32

gdi32

advapi32

Exports

Exports

Sections

.text Size: 11KB - Virtual size: 11KB

.extext Size: 3KB - Virtual size: 2KB

.data Size: 512B - Virtual size: 364B

.bmem Size: 4KB - Virtual size: 3KB

.sedat Size: 512B - Virtual size: 504B

.rsrc Size: 124KB - Virtual size: 123KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 11KB - Virtual size: 11KB

.extext
Size: 3KB - Virtual size: 2KB

.data
Size: 512B - Virtual size: 364B

.bmem
Size: 4KB - Virtual size: 3KB

.sedat
Size: 512B - Virtual size: 504B

.rsrc
Size: 124KB - Virtual size: 123KB

.reloc
Size: 1KB - Virtual size: 1KB