7243d2d66fc93cd063061a59e0c3ee83_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

7243d2d66fc93cd063061a59e0c3ee83_JaffaCakes118
Size

200KB
MD5

7243d2d66fc93cd063061a59e0c3ee83
SHA1

9c831894de58685a7f85a9b20fd56c24d1c065ff
SHA256

d473e6fac6fc7fcc04c9ec529e775cda7f8d671f0e83b4f6f8925d7348f20b23
SHA512

aadab3f12eebb6201645a370bd44f75f23465bfd48ef4a16f53397904a7538aae2d5a22de2ad5952ccf0b040f2ee15e49ef5d9026d3f7750b3b8602d16f811a5
SSDEEP

3072:KR6JVPx++LLL7SufZ/MPEBMoFM0OuChSr0J5SgT0DbqV:dx+qL7rB/MPGMoFxC5t0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7243d2d66fc93cd063061a59e0c3ee83_JaffaCakes118

Files

7243d2d66fc93cd063061a59e0c3ee83_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c4fee5642487c53b009569f428b431a5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

DrawEdge
DrawFrameControl
DispatchMessageW
ClientToScreen
DestroyCursor
CharToOemA
DispatchMessageA
DestroyIcon
DestroyWindow
ChildWindowFromPoint
BeginPaint
CharNextA
CreateIcon
CheckMenuItem
CharLowerA
CharLowerBuffA
CharUpperBuffA
DefFrameProcA
DrawIcon
CharNextW
DestroyMenu
CallWindowProcA
CloseClipboard
CreatePopupMenu
CreateMenu
DefMDIChildProcA
CallNextHookEx
DeleteMenu
DefWindowProcA
AdjustWindowRectEx

comdlg32

GetFileTitleA
GetOpenFileNameA
ChooseColorA
GetSaveFileNameA
FindTextA

msvcrt

abs

comctl32

ImageList_Remove
ImageList_Write
ImageList_DragShowNolock
ImageList_Draw
ImageList_Destroy
ImageList_Read
ImageList_GetBkColor
ImageList_Add

oleaut32

SysAllocStringLen

version

GetFileVersionInfoSizeA
VerInstallFileA

ole32

CreateBindCtx
StgCreateDocfileOnILockBytes

kernel32

CreateEventA
CompareStringA
CreateThread
DeleteCriticalSection
GetDiskFreeSpaceA
GetFileType
lstrlenA
GetFileSize
GlobalAlloc
DeleteFileA
FindClose
GetProcAddress
EnumCalendarInfoA
GetFullPathNameA
GetCurrentThreadId
GetCommandLineA
EnterCriticalSection
GetACP
LoadLibraryA
FindResourceA
GetEnvironmentStrings
CreateFileA
GetCurrentProcessId
FreeResource
GetVersionExA
FindFirstFileA
FormatMessageA
GetModuleHandleA
ExitProcess
VirtualAlloc
GetCPInfo
ExitThread
CloseHandle
GetLastError
GetFileAttributesA
Sleep
LocalAlloc
FreeLibrary
IsBadReadPtr
GetDateFormatA

shell32

Shell_NotifyIconA
SHGetFileInfoA
SHGetDiskFreeSpaceA

gdi32

GetDIBits
GetObjectA
GetPaletteEntries
GetDIBColorTable
SelectObject
GetRgnBox
LineTo
GetPixel
CreatePenIndirect

shlwapi

SHGetValueA
SHDeleteKeyA
SHEnumValueA
PathIsDirectoryA
PathGetCharTypeA
SHSetValueA
PathFileExistsA
SHDeleteValueA

Sections

.text
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 942B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc2
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc7
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc3
Size: 118KB - Virtual size: 118KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc9
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc6
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 976B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c4fee5642487c53b009569f428b431a5

Headers

File Characteristics

Imports

user32

comdlg32

msvcrt

comctl32

oleaut32

version

ole32

kernel32

shell32

gdi32

shlwapi

Sections

.text Size: 68KB - Virtual size: 67KB

.data Size: 1024B - Virtual size: 942B

.rsrc2 Size: 1KB - Virtual size: 1KB

.rsrc7 Size: 1KB - Virtual size: 1KB

.rsrc3 Size: 118KB - Virtual size: 118KB

.rsrc9 Size: 2KB - Virtual size: 1KB

.rsrc6 Size: 5KB - Virtual size: 5KB

.rsrc Size: 1024B - Virtual size: 976B

.text
Size: 68KB - Virtual size: 67KB

.data
Size: 1024B - Virtual size: 942B

.rsrc2
Size: 1KB - Virtual size: 1KB

.rsrc7
Size: 1KB - Virtual size: 1KB

.rsrc3
Size: 118KB - Virtual size: 118KB

.rsrc9
Size: 2KB - Virtual size: 1KB

.rsrc6
Size: 5KB - Virtual size: 5KB

.rsrc
Size: 1024B - Virtual size: 976B