622b7f5a329e13ef1ff7cb7022655e2a_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

622b7f5a329e13ef1ff7cb7022655e2a_JaffaCakes118
Size

110KB
MD5

622b7f5a329e13ef1ff7cb7022655e2a
SHA1

65f0a11ae8dffa77980a79e76e005941325ea522
SHA256

3f105bcf58e029e18e3c5a4f5c94d3dad0de703afadb3991b61f3d4532f6508d
SHA512

1ab1fbbb21fed9b134048f373634311569e187c4a3b94241c949c046bd131ca82d799e7b47c85010a32eb3a45a439b90788f73ae7fc18f44428f6a51c4934ae2
SSDEEP

3072:qTLituRA0m03jPhpwPK8SyZm6WF/ZR/9YB0Q:10FP7mBSl6eR/9Y

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
622b7f5a329e13ef1ff7cb7022655e2a_JaffaCakes118

Files

622b7f5a329e13ef1ff7cb7022655e2a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

892cc62a9cd22e645e3eb804a60ab5e6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

oleaut32

SafeArrayCreate
SafeArrayGetUBound
RegisterTypeLib
SafeArrayUnaccessData
OleLoadPicture
VariantChangeType

user32

GetWindowThreadProcessId
EndPaint
GetCapture
OpenClipboard
CharLowerBuffA
MessageBeep
SetClipboardData
DrawIconEx
ActivateKeyboardLayout
LoadStringA
InsertMenuItemA
DestroyWindow
ChildWindowFromPoint
SetWindowLongW
SetClassLongA
SetScrollRange
GetKeyState
FindWindowA
MsgWaitForMultipleObjects
IsWindowEnabled
GetMenuItemID
DrawMenuBar
GetActiveWindow
GetKeyboardState
GetCursor
WindowFromPoint
IsIconic
SetPropA
GetMenuItemInfoA
GetClipboardData
CloseClipboard
SetTimer
DestroyMenu
GetWindowDC
IsRectEmpty
ScreenToClient
SendMessageA
PtInRect
GetMenu
GetParent
TranslateMDISysAccel
GetTopWindow
CallNextHookEx
UpdateWindow
SetParent
ReleaseDC
RegisterClassA
GetClassLongA
SystemParametersInfoA
GetMenuItemCount
GetDC
GetWindowLongA
GetWindowTextA
GetClassInfoA
DestroyCursor
SetWindowTextA
BeginPaint
IsZoomed
GetClientRect
IsWindowVisible
GetClassNameA
CharLowerA
GetCursorPos
OffsetRect
GetKeyboardLayoutList
AdjustWindowRectEx
GetLastActivePopup
EnumChildWindows
LoadCursorA
SetRect
SetWindowsHookExA
GetKeyboardLayout
DrawTextA
GetSysColorBrush
DrawAnimatedRects
GetPropA
CreatePopupMenu
CharToOemA
GetSysColor
MoveWindow
IsDialogMessageW
DispatchMessageW
DrawEdge
GetWindowPlacement
GetWindowLongW
GetFocus
CharNextA
GetScrollRange
GetDCEx
GetScrollPos
WaitMessage
EnableMenuItem
EmptyClipboard
UnregisterClassA
RegisterWindowMessageA
GetMenuStringA
IsWindow
GetForegroundWindow
MessageBoxA

ole32

WriteClassStm
MkParseDisplayName
CoGetMalloc
CoReleaseMarshalData
CreateBindCtx
CoCreateInstanceEx
CoRegisterClassObject
CoTaskMemFree
CoRevokeClassObject
CoDisconnectObject

version

VerQueryValueA
GetFileVersionInfoA
VerFindFileA

shell32

SHGetFileInfoA
Shell_NotifyIconA
DragQueryFileA

gdi32

GetBitmapBits
SelectPalette
CreateBitmap
SetBkColor
SaveDC
GetPaletteEntries
CreatePalette
BitBlt
GetDIBits

kernel32

SetEvent
ExitProcess
GetModuleHandleA
GetLocalTime
VirtualAllocEx
Sleep
GetFileType
GetLastError
lstrlenA
GetCPInfo
lstrcatA
ExitThread
LockResource
LocalFree
GlobalAlloc
WriteFile
GetProcAddress

Sections

CODE
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

BSS
Size: 77KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

DATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

892cc62a9cd22e645e3eb804a60ab5e6

Headers

File Characteristics

Imports

oleaut32

user32

ole32

version

shell32

gdi32

kernel32

Sections

CODE Size: 28KB - Virtual size: 27KB

BSS Size: 77KB - Virtual size: 76KB

DATA Size: 4KB - Virtual size: 4KB

CODE
Size: 28KB - Virtual size: 27KB

BSS
Size: 77KB - Virtual size: 76KB

DATA
Size: 4KB - Virtual size: 4KB