3eda1e4cd6b42000fc0ad6af89e1fed7_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

3eda1e4cd6b42000fc0ad6af89e1fed7_JaffaCakes118
Size

185KB
MD5

3eda1e4cd6b42000fc0ad6af89e1fed7
SHA1

cb49a5ba5af311fe87d7413486807b6f39dee352
SHA256

94d6320413233b392c08c1e90f4615baf6ad1e6100b54df4600b99f2bb4197ba
SHA512

6981b411a72f41a60e813f50857a1c77477a55e95f2b115a7190349b1d6dbbc5c4450685a1af85e4e1c6db86388664d4a6de1467afc4200f605fed375088c50c
SSDEEP

3072:Op8xHi5ZFqQyvJbpoYdlKXBpa6KGW8vHRhzXgPfZposlxGWEkgb2/TfIjxYRFfDq:MWi5Y4O2BhKQ5hz8lxGW/TgjxYje

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3eda1e4cd6b42000fc0ad6af89e1fed7_JaffaCakes118

Files

3eda1e4cd6b42000fc0ad6af89e1fed7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9e3ab9a49ae9fee84813ed5f724e1772

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

user32

GetSysColorBrush
SetScrollRange
DestroyIcon
WinHelpW
SetWindowPos
DefWindowProcW
SetWindowsHookExW
SetClipboardData
RegisterClassW
ClipCursor
DestroyCursor
IsClipboardFormatAvailable
ToAscii
EmptyClipboard
MonitorFromWindow
DrawEdge
ChildWindowFromPoint
UnhookWindowsHookEx
CallNextHookEx
GetSysColor

shlwapi

PathStripToRootW
PathIsRootW
PathIsURLW
PathIsRelativeW
PathCanonicalizeW
PathCombineW

kernel32

GetFileAttributesA
LockFile
CreateFiber
VerLanguageNameW
FileTimeToLocalFileTime
SearchPathW
GetSystemTime
SetCommConfig
GetUserDefaultLangID
GetFileType
EnumResourceNamesW
GetProfileStringW
IsDBCSLeadByte
FileTimeToSystemTime
GetVolumeInformationW
FindResourceExA
FlushFileBuffers
SetEndOfFile
GetFileTime
CompareStringW
LocalAlloc
FlushFileBuffers
UnlockFile
GetVersionExW
GetSystemDirectoryW

rpcrt4

RpcStringBindingComposeA
RpcBindingSetAuthInfoA
NdrClientCall
RpcBindingFromStringBindingA
RpcStringFreeA

ole32

RegisterDragDrop
GetHGlobalFromStream
ReleaseStgMedium
CoCreateInstance
StgCreateDocfileOnILockBytes
OleRun
StgOpenStorageOnILockBytes
GetHGlobalFromILockBytes
CoGetMalloc
CoTaskMemAlloc
OleGetAutoConvert
CLSIDFromString
CreateStreamOnHGlobal
StringFromCLSID
OleRegGetUserType
CoTaskMemFree
CLSIDFromProgID
CoFreeUnusedLibraries
OleDuplicateData
CoGetClassObject
CoCreateGuid
RevokeDragDrop
ProgIDFromCLSID
CreateILockBytesOnHGlobal

comdlg32

GetFileTitleA

comctl32

ImageList_Add
ImageList_DrawEx
ImageList_Create
ImageList_GetIconSize
ImageList_Destroy

gdi32

GetBkColor
PlgBlt
FlattenPath
AnimatePalette
StrokePath
CreatePen
GetPath
ExtCreatePen
PolyBezier
CreateFontIndirectA
SetStretchBltMode
RoundRect
SetTextColor
GetBitmapBits
SetDIBits

Sections

.text
Size: 161KB - Virtual size: 161KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.lib
Size: 512B - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9e3ab9a49ae9fee84813ed5f724e1772

Headers

File Characteristics

Imports

user32

shlwapi

kernel32

rpcrt4

ole32

comdlg32

comctl32

gdi32

Sections

.text Size: 161KB - Virtual size: 161KB

.rdata Size: 3KB - Virtual size: 2KB

.data Size: 19KB - Virtual size: 19KB

.lib Size: 512B - Virtual size: 76KB

.text
Size: 161KB - Virtual size: 161KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 19KB - Virtual size: 19KB

.lib
Size: 512B - Virtual size: 76KB