749c3fd90d677ed866c9792e65a260a1_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

749c3fd90d677ed866c9792e65a260a1_JaffaCakes118
Size

48KB
MD5

749c3fd90d677ed866c9792e65a260a1
SHA1

0ce42ac416f98e27c2771e0dad76533e7a22015a
SHA256

76af4d48ebf6c7bb0b41ebad6c3d2640452b1e28b62db2f17757dbcc24d8a7b3
SHA512

0cf87392087e704263fa3ef9b9a35fad98675bb5351b5ca01003536445f0fb33c5475c0b05f2f6b3a4ea399491578ae1f0aec7332c67136842c3aa7b686e7963
SSDEEP

384:gw5jhxJxGf91sp9UE2HgqUX8Ip7BwITSzAvqoCJss:XjpxGf91cU1AqpI5Bwuv/Cz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
749c3fd90d677ed866c9792e65a260a1_JaffaCakes118

Files

749c3fd90d677ed866c9792e65a260a1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

158bf00a1db6e61f3633c6786ae43325

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

InitCommonControls
ImageList_DragEnter
ImageList_LoadImage
ImageList_DrawIndirect
ImageList_GetImageRect
ImageList_Remove
ImageList_AddMasked
ImageList_DragMove
ImageList_Create
ImageList_DrawEx
ImageList_GetImageCount
ImageList_ReplaceIcon
ImageList_Draw
ImageList_LoadImageA
ImageList_GetIcon
ImageList_GetImageInfo

kernel32

GetModuleFileNameA
SetLastError
GetLastError
GetStringTypeW
Sleep
GetFileSize
GetFullPathNameA
GetStdHandle
lstrcmpiA
GetStringTypeA
HeapAlloc
GetFileAttributesA
GetCommandLineA
GlobalAlloc
GlobalFree
GetCPInfo
lstrcpyA
lstrcatA
lstrlenA

gdi32

AddFontMemResourceEx
GetClipBox
GetCurrentPositionEx
CreateSolidBrush
SetTextColor
GetPixel
ExtTextOutA
CloseFigure
AddFontResourceW
BeginPath
BitBlt
AddFontResourceExW
ClearBitmapAttributes
RestoreDC
AbortPath
CloseMetaFile
ClearBrushAttributes

advapi32

RegQueryValueA
RegQueryInfoKeyW
RegDeleteValueA
RegEnumValueW
RegQueryValueW
RegFlushKey
RegCreateKeyExA
RegOpenKeyExW
RegGetKeySecurity
RegEnumKeyW
RegQueryValueExA
RegCreateKeyExW
RegReplaceKeyA
RegDeleteValueW
RegOpenKeyA
RegReplaceKeyW
RegOpenKeyW

user32

GetDlgItem
GetDC
CreateIcon
GetWindowTextA
AppendMenuW
BlockInput
GetCursor
CopyRect
DrawIcon
DrawTextA
DrawTextW
LoadMenuA
AppendMenuA
GetMenu
EndDialog
CloseWindow
IsWindow
AlignRects
CopyIcon
DialogBoxParamA

Sections

.text
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 621B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

158bf00a1db6e61f3633c6786ae43325

Headers

File Characteristics

Imports

comctl32

kernel32

gdi32

advapi32

user32

Sections

.text Size: 8KB - Virtual size: 4KB

.data Size: 28KB - Virtual size: 24KB

.rdata Size: 4KB - Virtual size: 57KB

.rsrc Size: 4KB - Virtual size: 621B

.text
Size: 8KB - Virtual size: 4KB

.data
Size: 28KB - Virtual size: 24KB

.rdata
Size: 4KB - Virtual size: 57KB

.rsrc
Size: 4KB - Virtual size: 621B