853e04eaa101ec18d143ada87342e71a_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

853e04eaa101ec18d143ada87342e71a_JaffaCakes118
Size

77KB
MD5

853e04eaa101ec18d143ada87342e71a
SHA1

eb6b3758f1ca01c796bbebdff8b0f66ce111dad1
SHA256

9002af1af2aa174b7e56788438012db61237c6d7486c4e54dd9c01b01e6e8543
SHA512

bd5ec7c2cd470b346091b44c704ce09f29ec7348371c7cc202b84e7aec29d89f167a6ecc0ab1acab459a1fec8fb72048d95ca92842320ffb38c0b3b68502cbab
SSDEEP

1536:GnyN64uMx/fXAJyplG1mu5i1P1EfBZa1RY1sD:GnyoOoJBEEfBZaYa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
853e04eaa101ec18d143ada87342e71a_JaffaCakes118

Files

853e04eaa101ec18d143ada87342e71a_JaffaCakes118
.exe windows:5 windows x86 arch:x86

09d2d3ca61fee27b719240884d863c9e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ntdll

wcsncmp
_vsnwprintf

shlwapi

StrCpyW
PathStripToRootW
PathCanonicalizeA
StrFormatByteSizeW
StrFormatKBSizeW

shell32

ord750

kernel32

TlsGetValue
SetCommBreak
SetFileTime
SetHandleCount
SetupComm
BindIoCompletionCallback
DeleteTimerQueue
CreateEventW
GetProfileStringA
CancelIo
RequestDeviceWakeup
OpenEventW
SetVolumeLabelA
FileTimeToDosDateTime
SetProcessWorkingSetSize
CreateDirectoryA
LoadLibraryW
SleepEx
CreateMutexA
lstrcmpiW
GetLogicalDriveStringsA
DisconnectNamedPipe
FatalAppExitW

user32

RealGetWindowClassW
DestroyAcceleratorTable
InvertRect
EnumPropsW
LookupIconIdFromDirectory
GetDlgItemTextA
DlgDirListW
GetMenuInfo
SetMenu
GetLastInputInfo
GetCursorPos
ScrollWindow
GetDCEx
TileWindows
IntersectRect
GetDC
EnumWindows
LoadBitmapA
CopyImage
DialogBoxIndirectParamW
KillTimer
IsCharUpperA
LoadMenuIndirectA
GetRawInputData
GetClientRect
ExitWindowsEx
TranslateMessage
EnumPropsA
PeekMessageW
GetListBoxInfo
GetTabbedTextExtentA
GetMenuContextHelpId
ShowScrollBar
PostThreadMessageW
MessageBoxW
MapWindowPoints
ExcludeUpdateRgn
DispatchMessageW
GetClassNameW
CreateAcceleratorTableW
DrawTextExW

gdi32

ExtTextOutA
RealizePalette
AbortPath
EnumEnhMetaFile
SetLayout
CreateBitmapIndirect
GetTextExtentPointI
GetTextExtentPointW
GetMetaRgn
GetOutlineTextMetricsA
SetMetaFileBitsEx
AnimatePalette
GetBitmapBits
GetBrushOrgEx
ScaleWindowExtEx

advapi32

AddAce
CopySid
IsValidAcl
IsTextUnicode
AddAuditAccessAceEx

Exports

Exports

__EnableScrollBar@12

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.extext
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 364B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bmem
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedat
Size: 512B - Virtual size: 504B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 124KB - Virtual size: 123KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

09d2d3ca61fee27b719240884d863c9e

Headers

File Characteristics

Imports

ntdll

shlwapi

shell32

kernel32

user32

gdi32

advapi32

Exports

Exports

Sections

.text Size: 11KB - Virtual size: 11KB

.extext Size: 3KB - Virtual size: 2KB

.data Size: 512B - Virtual size: 364B

.bmem Size: 4KB - Virtual size: 3KB

.sedat Size: 512B - Virtual size: 504B

.rsrc Size: 124KB - Virtual size: 123KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 11KB - Virtual size: 11KB

.extext
Size: 3KB - Virtual size: 2KB

.data
Size: 512B - Virtual size: 364B

.bmem
Size: 4KB - Virtual size: 3KB

.sedat
Size: 512B - Virtual size: 504B

.rsrc
Size: 124KB - Virtual size: 123KB

.reloc
Size: 1KB - Virtual size: 1KB