9478d237943a4e7024c2d985cb98c9de_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

9478d237943a4e7024c2d985cb98c9de_JaffaCakes118
Size

136KB
MD5

9478d237943a4e7024c2d985cb98c9de
SHA1

7719d97d0c81e227d3ab21fb5f3e066b6a0e9bba
SHA256

154d070af4c0050849944652c3bc533c8641621c01d2950c749775e712075845
SHA512

da5f3d443a043a37d64e5d4dbafd0d595721f01991f5d7e737304198762cb1d6949cde62d7b39d692956d34c1134e3e2499f3126b41f17ba03652f923af21406
SSDEEP

3072:okpj/wH9cYjCap60031q+VtX7me1UQ2vSRsM5:oiwHjjCaC31qSNV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9478d237943a4e7024c2d985cb98c9de_JaffaCakes118

Files

9478d237943a4e7024c2d985cb98c9de_JaffaCakes118
.exe windows:4 windows x86 arch:x86

cdb9bef655daabcdc736668fa1d87160

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

Shell_NotifyIconW

user32

GetCapture
CharUpperBuffA
GetWindowRect
GetScrollPos
IsRectEmpty
SendMessageW
GetWindow
EndDialog
MapWindowPoints
SetCursor
DefWindowProcA
CharUpperA
TranslateMessage
SetClipboardData
FillRect
SetFocus
IsDialogMessageW
DestroyMenu
InsertMenuA
UnregisterClassA
DrawTextA
GetSystemMenu
IsCharLowerA
PostMessageA
ReleaseDC
DestroyIcon
DestroyWindow
SetScrollRange
ScrollWindow
GetWindowTextLengthA
DispatchMessageW
InflateRect
GetFocus
IsCharUpperA
SendMessageA
GetClientRect
GetWindowPlacement
OemToCharA
EqualRect
ClientToScreen
SetParent
GetDlgItem
CharNextA
CharLowerA
GetDCEx
CallNextHookEx
GetPropA
GetMenuStringA
GetLastActivePopup
LoadBitmapA
DrawIconEx
ShowScrollBar
SetWindowLongW
DrawFrameControl
SetClassLongA
SetScrollInfo
CheckMenuItem
GetClassInfoA
IsWindowEnabled
GetSystemMetrics
GetMenuItemInfoA
CharNextW
IsDlgButtonChecked
GetDC
RemovePropA
CreatePopupMenu
RegisterWindowMessageA
GetScrollInfo
MapVirtualKeyA
PeekMessageA
DrawMenuBar
GetDesktopWindow
SetWindowLongA
IntersectRect

kernel32

ExitProcess
GlobalAlloc
VirtualAllocEx
RaiseException
ReadFile
LockResource

gdi32

BitBlt
GetBkColor
GetBkMode

Exports

Exports

_E9FVamYOo@20
_uk3gXKKdM1US9
_Gw3m2FqS@24
FeI7VPQMDF
__zQ6B9
_c6pxUQDVD@12
_CchY94d
1hLvg9Fl
_M4J1Yi9ssP@4
RfEcQJER@8
_vvmOj@12
_2Sq49FVg17W@20
_eHDYESl1
NbtJ5J8DuHKpE
dmM0nk15qk
_dAaxIXi
WnsIg
026aRwBJagFL
esWp9WyhT@20
KrrWevUlkEJ@4

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 117KB - Virtual size: 249KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

cdb9bef655daabcdc736668fa1d87160

Headers

File Characteristics

Imports

shell32

user32

kernel32

gdi32

Exports

Exports

Sections

.text Size: 12KB - Virtual size: 12KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 117KB - Virtual size: 249KB

.rsrc Size: 1KB - Virtual size: 1KB

.text
Size: 12KB - Virtual size: 12KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 117KB - Virtual size: 249KB

.rsrc
Size: 1KB - Virtual size: 1KB