889c162f598742ecc6cde6f87bf40c78_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

889c162f598742ecc6cde6f87bf40c78_JaffaCakes118
Size

69KB
MD5

889c162f598742ecc6cde6f87bf40c78
SHA1

b57d376e684887cbc525d225e24bf1c088c555d1
SHA256

7dc2fdc8c9b9c53c748214fcbe16cfdd336ecaa5391916667db5991e81b88092
SHA512

ad9e5aa8f569d2f12efd94aac0c51355f96205c561bcdf120578b4e6af43a8d5a60882b66e1459775f8c7b6073038be60a73a4da2195a2a8ae35a78c8ed79722
SSDEEP

1536:+ctvhfc0w+Sw8OxUlTfaaat+de18lwvKQY4bJwUJJV:F5Tw+SwLxSfaacXKUwUJJV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
889c162f598742ecc6cde6f87bf40c78_JaffaCakes118

Files

889c162f598742ecc6cde6f87bf40c78_JaffaCakes118
.exe windows:4 windows x86 arch:x86

243467df2b4fb7e17c9b333bccc5eeb3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

UnregisterClassA
GetSystemMetrics
MessageBoxA
IsZoomed
GetSystemMenu
CharLowerBuffA
IsCharUpperA
GetCursor
DispatchMessageA
DispatchMessageW
CharUpperA
CheckMenuItem
FindWindowA
ClientToScreen
GetParent
LoadBitmapA
EnumThreadWindows
FrameRect
DestroyMenu
DrawIcon
CreateWindowExA
SetWindowLongA
DrawFrameControl
EnableMenuItem
DestroyIcon
GetSysColorBrush
GetMenu
SetForegroundWindow
LoadCursorA
CharToOemA
MapWindowPoints
InflateRect
IsWindow
GetWindowLongA
InvalidateRect
GetForegroundWindow
DeleteMenu
GetClassLongA
CharNextA
GetDCEx
SetParent
IsRectEmpty
GetMenuItemInfoA
SetFocus
IsChild
GetMessagePos
GetMenuItemCount
CharUpperBuffA
OffsetRect
GetScrollInfo
RegisterWindowMessageA
IsDialogMessageW
DrawMenuBar
GetWindow
EnableScrollBar
ChildWindowFromPoint
GetScrollPos
SetWindowsHookExA
IsMenu
SetTimer
ScrollWindow
SetWindowPlacement
SetWindowPos
GetSysColor
LoadStringA
GetFocus
IsDlgButtonChecked
FillRect
GetKeyNameTextA
EmptyClipboard
ScreenToClient
DefMDIChildProcA
IsIconic
GetWindowPlacement

kernel32

GlobalAlloc
GetCurrentThread
ExitProcess
VirtualAlloc
LocalReAlloc
GetLastError
GetCommandLineW

advapi32

RegCreateKeyA
RegDeleteValueA
RegOpenKeyExA

comdlg32

FindTextA
ChooseColorA
GetSaveFileNameA
GetOpenFileNameA

gdi32

GetTextAlign
GetBkColor
GetTextColor

comctl32

ImageList_Destroy
ImageList_Draw
ImageList_GetBkColor
ImageList_Read
ImageList_Add

shell32

SHGetSpecialFolderLocation
Shell_NotifyIconW
SHGetDiskFreeSpaceA
Shell_NotifyIconA
SHFileOperationA

Exports

Exports

_SG8zZ6ormOQNgx
8BdTgl0GUfHN6@24
_ZGOVn7vyQvuFL@4
_RUNCx
_7SChWsyts@4
_vdAe7@16
_Ss17u85
itazP
_PlKzWJV_K2
_lxoAEEJpCvpn9x
_FDNeDJzsjw9N
vFHaFdxC@20
_foOq1DHB@12
_WS9co@8
xAszcR@4
HoQ_IPiF7@4
_QsUjvu2K
VixcH8Xc5vrl@4
JhFmky8moG7EhG
AiaGZ4W_Is77
uiG7Rh
_NdXpB_IAY
_R0wA_5tD@24
_nt2nN2h9h9K@4
_dVy0CqJcChn@12
_7r25Dc07K2f7@12
WG7tJH7@8
_7nMRbbp24hMiwq@12
_Curs1u6BGm56VM@12
_CQKnK@24
_Qjv8tWfKhhv@8
XksenmzfU@20
_DhAuKWqw1N

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 51KB - Virtual size: 75KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

243467df2b4fb7e17c9b333bccc5eeb3

Headers

File Characteristics

Imports

user32

kernel32

advapi32

comdlg32

gdi32

comctl32

shell32

Exports

Exports

Sections

.text Size: 11KB - Virtual size: 10KB

.rdata Size: 3KB - Virtual size: 3KB

.data Size: 51KB - Virtual size: 75KB

.rsrc Size: 2KB - Virtual size: 1KB

.text
Size: 11KB - Virtual size: 10KB

.rdata
Size: 3KB - Virtual size: 3KB

.data
Size: 51KB - Virtual size: 75KB

.rsrc
Size: 2KB - Virtual size: 1KB