652c0bc91c994d09d54cea0ed1741885_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

652c0bc91c994d09d54cea0ed1741885_JaffaCakes118
Size

169KB
MD5

652c0bc91c994d09d54cea0ed1741885
SHA1

21128633ad14b6df35444772636eacd25ac0ea13
SHA256

2861e7c27819db144d425778f899b02d0c804a8236b61d36aa5ed1b1ee8199d6
SHA512

b9921c55f8958087a727ee3353852dcea2868f9605aa7e67f7a7208c61083e6347d44861c046f14eb7daf6c52b1814186f233a38a0427e597635360618a3a8ea
SSDEEP

3072:z2neztFrSox2xkYo1+J0FqNAqhfeM7s8RuZ:zceF1GkWJ0FDqhfC8Rw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
652c0bc91c994d09d54cea0ed1741885_JaffaCakes118

Files

652c0bc91c994d09d54cea0ed1741885_JaffaCakes118
.exe windows:4 windows x86 arch:x86

fda9f44ffe2385f07df2f421ec548296

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

msvcrt

wcscspn
sprintf
memset
srand
clock
memmove
sqrt
time

oleaut32

SafeArrayCreate
SafeArrayPtrOfIndex
SafeArrayGetElement
VariantChangeType
SysStringLen

version

GetFileVersionInfoSizeA

user32

IsWindowEnabled
IsRectEmpty
EnumThreadWindows
EnableMenuItem
WindowFromPoint
CharLowerBuffA
RedrawWindow
TrackPopupMenu
GetSysColor
GetSystemMenu
PtInRect
DrawMenuBar
GetMenuItemCount
CreateIcon
IsWindowVisible
DrawFrameControl
RegisterClipboardFormatA
CreatePopupMenu
GetTopWindow
DestroyMenu
GetWindowLongA
RegisterWindowMessageA
DestroyCursor
GetClassLongA
ScrollWindow
IsDialogMessageA
FrameRect
PeekMessageW
SetMenuItemInfoA
GetClientRect
CloseClipboard
EmptyClipboard
GetCapture
SetMenu
CheckMenuItem
SetCursor
RemoveMenu
GetParent
SetScrollPos
RemovePropA
FillRect
GetScrollPos
CharLowerA
CharNextA
GetForegroundWindow
GetLastActivePopup
SetRect
IsCharLowerA
DrawTextA
GetCursorPos
GetWindowPlacement
EnumWindows
DrawIcon
IntersectRect
GetScrollRange
GetDCEx
LoadIconA
GetKeyboardState
EndPaint
GetFocus
GetWindowThreadProcessId
RegisterClassA
GetClassInfoA
LoadStringA
IsZoomed
OpenClipboard
CharUpperBuffA
InsertMenuA
DrawAnimatedRects
OemToCharA
EnumChildWindows
DrawEdge
SetParent
DeleteMenu
SendMessageA
GetMenuItemInfoA
GetScrollInfo
GetWindowDC
GetWindowRect
MapVirtualKeyA
SetWindowPos
CharNextW
GetClipboardData
SetWindowLongA
KillTimer
GetWindowLongW
EqualRect
GetWindowTextLengthA
LoadBitmapA
PostMessageA
IsWindow
GetWindow
UpdateWindow
GetCursor
GetMenuStringA
GetKeyState
UnhookWindowsHookEx
GetDesktopWindow
AdjustWindowRectEx
GetDC
GetIconInfo
GetWindowTextA
SetClipboardData
PostQuitMessage
SetWindowTextA
IsCharUpperA
CharUpperA
MsgWaitForMultipleObjects
wsprintfA
ClientToScreen
GetSysColorBrush
GetClassNameA
DefWindowProcA
SetScrollRange
CreateMenu

advapi32

RegEnumValueA

kernel32

GetLastError
lstrlenA
GetCurrentProcessId
GetACP
VirtualAlloc
GetCommandLineW
GetCPInfo

shlwapi

PathGetCharTypeA
SHDeleteValueA
SHQueryInfoKeyA
SHSetValueA

comctl32

ImageList_Add
ImageList_Write
ImageList_Read

ole32

CreateStreamOnHGlobal
CoCreateGuid
CoFreeUnusedLibraries
CLSIDFromProgID
StringFromIID
CoDisconnectObject

comdlg32

GetFileTitleA

gdi32

SetBkColor
GetCurrentPositionEx
CreateCompatibleDC
CreateCompatibleBitmap
SetTextColor

Exports

Exports

_Qtd@20
_Uuq

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 137KB - Virtual size: 204KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 424B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 719B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fda9f44ffe2385f07df2f421ec548296

Headers

File Characteristics

Imports

msvcrt

oleaut32

version

user32

advapi32

kernel32

shlwapi

comctl32

ole32

comdlg32

gdi32

Exports

Exports

Sections

.text Size: 9KB - Virtual size: 9KB

.data Size: 137KB - Virtual size: 204KB

.tls Size: 512B - Virtual size: 424B

.rdata Size: 1024B - Virtual size: 719B

.idata Size: 4KB - Virtual size: 4KB

.rsrc Size: 15KB - Virtual size: 15KB

.text
Size: 9KB - Virtual size: 9KB

.data
Size: 137KB - Virtual size: 204KB

.tls
Size: 512B - Virtual size: 424B

.rdata
Size: 1024B - Virtual size: 719B

.idata
Size: 4KB - Virtual size: 4KB

.rsrc
Size: 15KB - Virtual size: 15KB