aead7bb45688d79eee250a9c74af41e0_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

aead7bb45688d79eee250a9c74af41e0_JaffaCakes118
Size

323KB
MD5

aead7bb45688d79eee250a9c74af41e0
SHA1

60bce96714e862237b4d68e78ae941a75306d281
SHA256

e043f67bc971c52d49839955b7207ae18aadaeb891a75ea50ba4bc99114770dd
SHA512

145a2ffda6224a764105a17ba04ae8f35c4c4b9f7ba6198b9365b5003a5270ab2d741fb9253c0a873576356baefa82921276ebbae3573725bbc02fa20ce15e09
SSDEEP

6144:qW+BIKuTFLVU2HvKtmihnvvLHBtd8gCWiI2cezT+sRz/u:q0TtHvKtmihnvXd8gfiZ+sdu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aead7bb45688d79eee250a9c74af41e0_JaffaCakes118

Files

aead7bb45688d79eee250a9c74af41e0_JaffaCakes118
.exe windows:5 windows x86 arch:x86

fcdd393a3f2ef3c951f3260166bed3ab

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msimg32

AlphaBlend
TransparentBlt

comctl32

InitCommonControlsEx

winmm

mixerGetNumDevs
mixerGetDevCapsW
mixerGetLineInfoW

kernel32

lstrcatW
GetLastError
CreateMutexW
CreateFileW
FreeLibrary
GetModuleFileNameW
GetProcAddress
LoadLibraryW
GetVersionExW
ExitProcess
GetTickCount
GetVersion
GetCurrentProcess
FreeResource
WriteFile
CloseHandle
lstrcmpiW
lstrcpynW
GetModuleHandleW
lstrlenW
FindResourceW
SizeofResource
LoadResource
LockResource
GlobalAlloc
GlobalLock
GetLogicalDriveStringsW
lstrcpyW
GetDriveTypeW
GetProcessHeap
HeapAlloc
HeapSize
HeapFree
ReadFile

user32

CallWindowProcW
SetWindowLongW
DialogBoxParamW
SetForegroundWindow
FindWindowW
IsDlgButtonChecked
CheckDlgButton
CreateDialogIndirectParamW
GetWindowLongW
DestroyIcon
LoadIconW
DeleteMenu
GetSubMenu
GetMenu
IsCharAlphaW
IsCharAlphaNumericW
MessageBoxW
PostMessageW
GetSysColorBrush
DestroyMenu
DialogBoxIndirectParamW
AppendMenuW
CreatePopupMenu
LoadStringW
GetFocus
GetDlgCtrlID
SetFocus
GetCursorPos
TrackPopupMenu
GetKeyNameTextW
EndDialog
SystemParametersInfoW
GetSystemMetrics
GetWindowRect
MapWindowPoints
LoadCursorW
SetCursor
EnableWindow
ShowWindow
RedrawWindow
GetDC
FillRect
DrawTextW
CreateWindowExW
SetWindowPos
GetClientRect
wsprintfW
SetWindowTextW
SetDlgItemTextW
GetDlgItem
SendMessageW
LoadBitmapW

gdi32

CreateCompatibleDC
GetTextExtentPoint32W
GetDeviceCaps
DeleteDC
GetStockObject
SetTextColor
CreateFontIndirectW
DeleteObject
SetBkMode
SetBkColor
CreateFontW
ExtTextOutW
SelectObject

comdlg32

GetOpenFileNameW
GetSaveFileNameW

advapi32

RegEnumValueW
RegCreateKeyExW
RegSetValueExW
RegDeleteKeyW
RegDeleteValueW
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
RegQueryInfoKeyW

shell32

SHBrowseForFolderW
SHGetPathFromIDListW
SHGetMalloc
ShellExecuteW

ole32

CreateStreamOnHGlobal

Sections

.text
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 272KB - Virtual size: 271KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fcdd393a3f2ef3c951f3260166bed3ab

Headers

DLL Characteristics

File Characteristics

Imports

msimg32

comctl32

winmm

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

Sections

.text Size: 36KB - Virtual size: 36KB

.rdata Size: 7KB - Virtual size: 6KB

.data Size: 6KB - Virtual size: 9KB

.rsrc Size: 272KB - Virtual size: 271KB

.text
Size: 36KB - Virtual size: 36KB

.rdata
Size: 7KB - Virtual size: 6KB

.data
Size: 6KB - Virtual size: 9KB

.rsrc
Size: 272KB - Virtual size: 271KB