42a1d3ce263059541ceb84f23f520795_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

42a1d3ce263059541ceb84f23f520795_JaffaCakes118
Size

922KB
MD5

42a1d3ce263059541ceb84f23f520795
SHA1

49f635ba521735afc0b40e51ff04f0d69129313f
SHA256

617f22e8182dd81e69b5e0bf8946ec16df755aa0d2c8664a1fe9a10fdb7babb7
SHA512

cc8eab366047cd04e657dddcf1f1becf90af6792e65ea8664432a21b2d0a25e6cd1072d2df3f1842901501e5530869bc804a112e399cb15c01ca8de0ec2d5ccd
SSDEEP

12288:aezI1OGXhPlngtONIBtUvE7WUIstpmKmse8QacuDBPP7YqOLjv79nXEeeM1bKYpm:alXhLIB6tUHmKm9Oc8BPP7YqkB1d/eDj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
42a1d3ce263059541ceb84f23f520795_JaffaCakes118

Files

42a1d3ce263059541ceb84f23f520795_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a9f83039ad6d574c0a623c33f02ba665

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

oleaut32

SafeArrayRedim
SafeArrayUnaccessData
VariantCopy
SafeArrayGetElement
SysFreeString
SysAllocStringLen

ws2_32

WSAHtons
gethostbyaddr
WSAStringToAddressA
inet_addr
WSASetServiceW
WSACleanup

kernel32

GetDiskFreeSpaceExA
EnumSystemCodePagesA
CreatePipe
FileTimeToLocalFileTime
VirtualProtect
FindFirstFileExW
FreeEnvironmentStringsA
GetOverlappedResult
GetProcessHeap
ExitProcess
RaiseException
GetCommState
SetConsoleWindowInfo
GetPrivateProfileStringW

user32

DialogBoxParamW
SetWindowWord
LoadKeyboardLayoutW
SetMenuItemInfoA
ModifyMenuA
GetDlgCtrlID
ChangeDisplaySettingsExA
DefDlgProcW
SendMessageTimeoutW
MapVirtualKeyExW
SetClassLongA
OpenIcon
CloseDesktop
RegisterClipboardFormatA
GetWindowLongA
GetWindowTextLengthA
EnumDisplayDevicesW
IsCharAlphaNumericW
wvsprintfA
GetWindowTextLengthW
EndPaint
LoadBitmapA
ReplyMessage
GetClassNameA
SetWindowTextA
MapWindowPoints
GetPropA
GetMenuItemInfoW
CreateWindowExA
GetKeyNameTextA
SwapMouseButton
CopyRect
CharUpperA

shell32

SHGetSpecialFolderPathA
SHFileOperationW
SHGetPathFromIDListA
SHBrowseForFolderA

ole32

OleBuildVersion
OleCreateFromData

comctl32

ImageList_GetImageInfo
ImageList_DragEnter
ImageList_SetBkColor

Sections

.text
Size: 18KB - Virtual size: 235KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 609KB - Virtual size: 608KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a9f83039ad6d574c0a623c33f02ba665

Headers

File Characteristics

Imports

oleaut32

ws2_32

kernel32

user32

shell32

ole32

comctl32

Sections

.text Size: 18KB - Virtual size: 235KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 609KB - Virtual size: 608KB

.rsrc Size: 17KB - Virtual size: 16KB

.text
Size: 18KB - Virtual size: 235KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 609KB - Virtual size: 608KB

.rsrc
Size: 17KB - Virtual size: 16KB