71d67ee2eda74114822a99643143e9cf_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

71d67ee2eda74114822a99643143e9cf_JaffaCakes118
Size

32KB
MD5

71d67ee2eda74114822a99643143e9cf
SHA1

c7fbbf5688609c293b650bace9b2a5e796e1ce28
SHA256

1adbc2396e9cde000fda94a50b7ceaf474778eb48d59bb942f47152363eb72fa
SHA512

a66c4c072d09ce26a5b4e49144909e93b1c444acd0083b2bc821b2e1b5e0b16b39b719a8cac936452869675927b5955cbac5466ea04aa36274b754bb65617c71
SSDEEP

384:P0MMz5Sljnhl7TLyQlTtUAIFIryYipwo93:PPtelarlo93

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
71d67ee2eda74114822a99643143e9cf_JaffaCakes118

Files

71d67ee2eda74114822a99643143e9cf_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3637eb45131fdf15edfd6ed034624aa0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

InitializeCriticalSection
lstrcpyA
lstrlenA
lstrcmpiA
FlushInstructionCache
HeapCreate
HeapDestroy
DeleteCriticalSection
GetStringTypeW
GetStringTypeA
MultiByteToWideChar
GetSystemInfo
GetVersionExA
GetCurrentThreadId
EnterCriticalSection
LeaveCriticalSection
HeapFree
HeapAlloc
GetCommandLineA
ExitProcess
GetStartupInfoA
GetCurrentProcess
GetModuleHandleA
RtlUnwind

user32

IsWindow
GetWindowTextA
GetWindowTextLengthA
GetParent
GetWindowLongA
GetClassNameA
SetWindowLongA
ScreenToClient
GetCursorPos
ReleaseCapture
GetCapture
SetCapture
SetFocus
SetCursor
PtInRect
InvalidateRect
BeginPaint
FillRect
EndPaint
SetWindowPos
GetDC
SystemParametersInfoA
GetWindowRect
GetWindow
CreateWindowExA
DrawFocusRect
GetFocus
CallWindowProcA
DrawTextA
ReleaseDC
DestroyCursor
DefWindowProcA
SetRectEmpty
GetSystemMetrics
LoadImageA
SendMessageA
GetDlgItem
SetWindowTextW
EndDialog
GetActiveWindow
MapWindowPoints
GetClientRect
CharNextA
RegisterWindowMessageA
MessageBoxA
DialogBoxParamA
DestroyWindow
CreateCursor

gdi32

SetTextColor
DeleteDC
GetObjectA
CreateFontIndirectA
SetBkMode
DeleteObject
SelectObject

advapi32

RegCloseKey
RegOpenKeyExA
RegQueryValueExA

shell32

ShellExecuteA

ole32

CoUninitialize
CoInitialize

comctl32

InitCommonControlsEx

Sections

.text
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 4KB - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3637eb45131fdf15edfd6ed034624aa0

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

comctl32

Sections

.text Size: 12KB - Virtual size: 9KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 4KB - Virtual size: 1KB

.CRT Size: 4KB - Virtual size: 8B

.rsrc Size: 4KB - Virtual size: 1KB

.text
Size: 12KB - Virtual size: 9KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 4KB - Virtual size: 1KB

.CRT
Size: 4KB - Virtual size: 8B

.rsrc
Size: 4KB - Virtual size: 1KB