9fcc5a03a804a5689d48e0b28c73361a_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

9fcc5a03a804a5689d48e0b28c73361a_JaffaCakes118
Size

200KB
MD5

9fcc5a03a804a5689d48e0b28c73361a
SHA1

092c9ace419e21e685368a9b308c135f05d8890d
SHA256

b9d0984db2e0fd106a6ed2b28bf55a81fa39b3240d7779008034d895c6621edf
SHA512

d89ab56681695806c9815d7dbff3b72a2e9f25c4d67197e46f58c73ea1ab1309ea1a8ae500f4ca85e11c96316c7c94590e0c665bc87eb4b388382f5798fadeb5
SSDEEP

3072:KR6JVPx++LLL7SufZ/MPEBMoFM0OughSr0J5SgT0DbqV:dx+qL7rB/MPGMoFx45t0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9fcc5a03a804a5689d48e0b28c73361a_JaffaCakes118

Files

9fcc5a03a804a5689d48e0b28c73361a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c4fee5642487c53b009569f428b431a5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

DrawEdge
DrawFrameControl
DispatchMessageW
ClientToScreen
DestroyCursor
CharToOemA
DispatchMessageA
DestroyIcon
DestroyWindow
ChildWindowFromPoint
BeginPaint
CharNextA
CreateIcon
CheckMenuItem
CharLowerA
CharLowerBuffA
CharUpperBuffA
DefFrameProcA
DrawIcon
CharNextW
DestroyMenu
CallWindowProcA
CloseClipboard
CreatePopupMenu
CreateMenu
DefMDIChildProcA
CallNextHookEx
DeleteMenu
DefWindowProcA
AdjustWindowRectEx

comdlg32

GetFileTitleA
GetOpenFileNameA
ChooseColorA
GetSaveFileNameA
FindTextA

msvcrt

abs

comctl32

ImageList_Remove
ImageList_Write
ImageList_DragShowNolock
ImageList_Draw
ImageList_Destroy
ImageList_Read
ImageList_GetBkColor
ImageList_Add

oleaut32

SysAllocStringLen

version

GetFileVersionInfoSizeA
VerInstallFileA

ole32

CreateBindCtx
StgCreateDocfileOnILockBytes

kernel32

CreateEventA
CompareStringA
CreateThread
DeleteCriticalSection
GetDiskFreeSpaceA
GetFileType
lstrlenA
GetFileSize
GlobalAlloc
DeleteFileA
FindClose
GetProcAddress
EnumCalendarInfoA
GetFullPathNameA
GetCurrentThreadId
GetCommandLineA
EnterCriticalSection
GetACP
LoadLibraryA
FindResourceA
GetEnvironmentStrings
CreateFileA
GetCurrentProcessId
FreeResource
GetVersionExA
FindFirstFileA
FormatMessageA
GetModuleHandleA
ExitProcess
VirtualAlloc
GetCPInfo
ExitThread
CloseHandle
GetLastError
GetFileAttributesA
Sleep
LocalAlloc
FreeLibrary
IsBadReadPtr
GetDateFormatA

shell32

Shell_NotifyIconA
SHGetFileInfoA
SHGetDiskFreeSpaceA

gdi32

GetDIBits
GetObjectA
GetPaletteEntries
GetDIBColorTable
SelectObject
GetRgnBox
LineTo
GetPixel
CreatePenIndirect

shlwapi

SHGetValueA
SHDeleteKeyA
SHEnumValueA
PathIsDirectoryA
PathGetCharTypeA
SHSetValueA
PathFileExistsA
SHDeleteValueA

Sections

.text
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 942B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc2
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc7
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc3
Size: 118KB - Virtual size: 118KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc9
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc6
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 976B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c4fee5642487c53b009569f428b431a5

Headers

File Characteristics

Imports

user32

comdlg32

msvcrt

comctl32

oleaut32

version

ole32

kernel32

shell32

gdi32

shlwapi

Sections

.text Size: 68KB - Virtual size: 67KB

.data Size: 1024B - Virtual size: 942B

.rsrc2 Size: 1KB - Virtual size: 1KB

.rsrc7 Size: 1KB - Virtual size: 1KB

.rsrc3 Size: 118KB - Virtual size: 118KB

.rsrc9 Size: 2KB - Virtual size: 1KB

.rsrc6 Size: 5KB - Virtual size: 5KB

.rsrc Size: 1024B - Virtual size: 976B

.text
Size: 68KB - Virtual size: 67KB

.data
Size: 1024B - Virtual size: 942B

.rsrc2
Size: 1KB - Virtual size: 1KB

.rsrc7
Size: 1KB - Virtual size: 1KB

.rsrc3
Size: 118KB - Virtual size: 118KB

.rsrc9
Size: 2KB - Virtual size: 1KB

.rsrc6
Size: 5KB - Virtual size: 5KB

.rsrc
Size: 1024B - Virtual size: 976B