7354bfbdfcd696760f7fd9b7a964888d_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

7354bfbdfcd696760f7fd9b7a964888d_JaffaCakes118
Size

280KB
MD5

7354bfbdfcd696760f7fd9b7a964888d
SHA1

9fcb659cc432cd8f87734a40e1dfe9a57f5f3acf
SHA256

05b402e1c3c8cf30106d4afe02c23785d86b99cc651dc222d4b801bc6aed528d
SHA512

28b520e54f47e96c22b1c2652a30686e93c7fa990849fe5c3bd165837c9d89c22860cf56727007426a1dd25598c2c5c89c5a030b3f3e4c32d018afdac9bd9b91
SSDEEP

6144:mBYTBF7SqG/ceRAxJwF0hOqBZueBrJveq1lUbhYcnZt8J0U89t5m8v:mBeBFeF/vR8uMPBZZBrT1lCV4di5L

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7354bfbdfcd696760f7fd9b7a964888d_JaffaCakes118

Files

7354bfbdfcd696760f7fd9b7a964888d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ac789584176044cdfa7f7e92c9623d0a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetEndOfFile
GetFileAttributesW
InterlockedIncrement
GetModuleFileNameW
CreateEventW
InterlockedDecrement
VirtualAlloc
SetFilePointer
GetSystemTime
ResetEvent
CreateFileW
TerminateThread
SuspendThread
GlobalLock
SizeofResource
LoadLibraryW
WideCharToMultiByte
FileTimeToSystemTime
GlobalAddAtomW
GetCurrentProcessId
GetLogicalDrives
GetVersion
MultiByteToWideChar
GetPrivateProfileStringW
FreeLibrary
SetWaitableTimer
GetLocalTime
SetLastError
GetFileAttributesExW
ExitProcess
GetProcessHeap
HeapAlloc
HeapFree
HeapSize
IsBadReadPtr
LoadLibraryA
VirtualFree
VirtualProtect
MoveFileW
WritePrivateProfileStringW
LoadResource
GetTickCount
GetProcAddress
lstrlenW
GlobalUnlock
FindClose
MulDiv
DeleteFileW
GetDriveTypeW
GlobalAlloc
FindResourceExW
DuplicateHandle
CancelWaitableTimer
SetThreadPriority
CreateThread
WaitForSingleObject
GlobalDeleteAtom
FindFirstFileW

user32

TranslateMessage
SetWindowTextW
GetWindowDC
LoadImageW
SetForegroundWindow
InvalidateRect
RegisterHotKey
SetCapture
GetCursorPos
SendDlgItemMessageW
DialogBoxParamW
SystemParametersInfoW
wsprintfW
DefWindowProcW
GetWindowTextW
PostThreadMessageW
CreateWindowExW
GetParent
LoadCursorW
PostMessageW
GetClassNameW
RegisterWindowMessageW
DrawTextW
EnableWindow
DispatchMessageW
SendMessageW
UpdateWindow
LoadBitmapW
MessageBoxW
SetLayeredWindowAttributes
EndDialog
FillRect
LoadStringW
WindowFromPoint

gdi32

GetClipBox
CreateCompatibleDC
CreateDCW
DPtoLP
CreateBitmap
SetBkMode
SetMapMode
LineTo
DeleteDC
GetMapMode
CreateCompatibleBitmap
SetBkColor
CreateSolidBrush

advapi32

RegOpenKeyExW
RegNotifyChangeKeyValue
RegSetValueExW
RegCloseKey
RegCreateKeyExW

shell32

Shell_NotifyIconW

ole32

CoInitializeEx
CoInitialize
CoUninitialize
CreateStreamOnHGlobal

Sections

.text
Size: 248KB - Virtual size: 246KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

ac789584176044cdfa7f7e92c9623d0a

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

Sections

.text Size: 248KB - Virtual size: 246KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 24KB - Virtual size: 21KB

.text
Size: 248KB - Virtual size: 246KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 24KB - Virtual size: 21KB