974fcc37a7ea8e3d11ece9a918216a81_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

974fcc37a7ea8e3d11ece9a918216a81_JaffaCakes118
Size

148KB
MD5

974fcc37a7ea8e3d11ece9a918216a81
SHA1

56dfd565a56486f71abf890d2c22dc3b226d196e
SHA256

bc619884de64073174d525da0f8599e152fe0066230fd136e0dc5ef8d709f08c
SHA512

3f91d634d2500ab9c7af200ff80ac11e1e5c3f70e505e2e190090606307a1814a0787af90c9d3bb3fc43dd9158d7ba4c8e5b6f1894c07511123fad7d564447c4
SSDEEP

3072:K0PNxJ6Eo529pFGAv2uUeuNbsarwY64LI7P2WkAu1U/Fedh:h2ds9GhR6II7P2su10FQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
974fcc37a7ea8e3d11ece9a918216a81_JaffaCakes118

Files

974fcc37a7ea8e3d11ece9a918216a81_JaffaCakes118
.exe windows:5 windows x86 arch:x86

a95f3aed526ee033aa8749bb623a8b68

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

FindWindowExW
InvalidateRect
keybd_event
SetCaretPos
InflateRect
HideCaret
FillRect
SendDlgItemMessageW
LoadStringW
CloseWindow
GetKeyState
GetWindow
GetWindowRect

gdi32

CreateFontA
CreateRectRgn
StretchDIBits
ScaleWindowExtEx
SetROP2

shlwapi

GetMenuPosFromID
PathRemoveExtensionA
StrStrIA

ole32

CoFileTimeToDosDateTime

comdlg32

CommDlgExtendedError
ChooseColorW

shell32

CommandLineToArgvW

kernel32

LocalFileTimeToFileTime
GetModuleHandleW
TlsSetValue
SetFileAttributesA
SystemTimeToFileTime
CopyFileW
GetSystemTime
GetCommandLineW
LockResource
GetComputerNameExW
VerSetConditionMask
GetNumberFormatW
CreateMailslotW

msvcrt

fwrite
fflush
remove
strcoll
fputc
fputs

comctl32

CreatePropertySheetPageW
DestroyPropertySheetPage
ImageList_LoadImageW

winspool.drv

EndDocPrinter
DocumentPropertiesW

Exports

Exports

_Hvqvbjxa_qonCkieha_ty@16
_QycbioatO_qunglrmg@8
_EtllqlqzY_hvjethu_o@16
_ZspthsXe_qAnXXwHbu@4
_Wwebyxauq_hygAz@8
_LoeykuEz_rzzacoR@8
_Enxqqfce_eflbiscuy_i@12
_CfvuglgYQ_Pbpvb@16
_CdUkoetwp_tdhbxV@4
_Vbdzcezs_aOgeprvu_m@16
_ZcZuqrNi_fucgvkPd_Jur@8
_Nssacuvin_cqgVp@4
_SNxuhgsb_tiwtmKd_se@8
_EhjHaaBgA_fufsreg@8
_TqymLbrqy_tvveOxi_se@12
_Ystszubas_mkvezsnu@12
_QgRrrevp_xgweqhp_ctj@4
_FGeaXsyq_dzycwwt_t@8

Sections

.icode
Size: - Virtual size: 232KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 43KB - Virtual size: 43KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.vars
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 86KB - Virtual size: 86KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a95f3aed526ee033aa8749bb623a8b68

Headers

File Characteristics

Imports

user32

gdi32

shlwapi

ole32

comdlg32

shell32

kernel32

msvcrt

comctl32

winspool.drv

Exports

Exports

Sections

.icode Size: - Virtual size: 232KB

.text Size: 43KB - Virtual size: 43KB

.rdata Size: 3KB - Virtual size: 3KB

.vars Size: 2KB - Virtual size: 2KB

.data Size: 3KB - Virtual size: 3KB

.rsrc Size: 86KB - Virtual size: 86KB

.reloc Size: 9KB - Virtual size: 8KB

.icode
Size: - Virtual size: 232KB

.text
Size: 43KB - Virtual size: 43KB

.rdata
Size: 3KB - Virtual size: 3KB

.vars
Size: 2KB - Virtual size: 2KB

.data
Size: 3KB - Virtual size: 3KB

.rsrc
Size: 86KB - Virtual size: 86KB

.reloc
Size: 9KB - Virtual size: 8KB