b2e76a91de0bb70e4755086b5577bf50_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

b2e76a91de0bb70e4755086b5577bf50_JaffaCakes118
Size

323KB
MD5

b2e76a91de0bb70e4755086b5577bf50
SHA1

25acbcfcbf59ec2654c8bc64dee0c64d74e1f80f
SHA256

1922dab1a6d65adfdc876983ecf1f773a009081a8d0f5d93ab4bc7913f56c1fa
SHA512

8247e6454482d9ad0a71af0fc7c565daac643a485d602a21d23854059b7009579a51dc6f12b103075d868506f42d53480fc714a444e141bc64b201cb25036a08
SSDEEP

6144:qW+BIKuTFLVU2HvKtmihnvvLHBtd8gCWiI2cezT+sRz/g:q0TtHvKtmihnvXd8gfiZ+sdg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b2e76a91de0bb70e4755086b5577bf50_JaffaCakes118

Files

b2e76a91de0bb70e4755086b5577bf50_JaffaCakes118
.exe windows:5 windows x86 arch:x86

fcdd393a3f2ef3c951f3260166bed3ab

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msimg32

AlphaBlend
TransparentBlt

comctl32

InitCommonControlsEx

winmm

mixerGetNumDevs
mixerGetDevCapsW
mixerGetLineInfoW

kernel32

lstrcatW
GetLastError
CreateMutexW
CreateFileW
FreeLibrary
GetModuleFileNameW
GetProcAddress
LoadLibraryW
GetVersionExW
ExitProcess
GetTickCount
GetVersion
GetCurrentProcess
FreeResource
WriteFile
CloseHandle
lstrcmpiW
lstrcpynW
GetModuleHandleW
lstrlenW
FindResourceW
SizeofResource
LoadResource
LockResource
GlobalAlloc
GlobalLock
GetLogicalDriveStringsW
lstrcpyW
GetDriveTypeW
GetProcessHeap
HeapAlloc
HeapSize
HeapFree
ReadFile

user32

CallWindowProcW
SetWindowLongW
DialogBoxParamW
SetForegroundWindow
FindWindowW
IsDlgButtonChecked
CheckDlgButton
CreateDialogIndirectParamW
GetWindowLongW
DestroyIcon
LoadIconW
DeleteMenu
GetSubMenu
GetMenu
IsCharAlphaW
IsCharAlphaNumericW
MessageBoxW
PostMessageW
GetSysColorBrush
DestroyMenu
DialogBoxIndirectParamW
AppendMenuW
CreatePopupMenu
LoadStringW
GetFocus
GetDlgCtrlID
SetFocus
GetCursorPos
TrackPopupMenu
GetKeyNameTextW
EndDialog
SystemParametersInfoW
GetSystemMetrics
GetWindowRect
MapWindowPoints
LoadCursorW
SetCursor
EnableWindow
ShowWindow
RedrawWindow
GetDC
FillRect
DrawTextW
CreateWindowExW
SetWindowPos
GetClientRect
wsprintfW
SetWindowTextW
SetDlgItemTextW
GetDlgItem
SendMessageW
LoadBitmapW

gdi32

CreateCompatibleDC
GetTextExtentPoint32W
GetDeviceCaps
DeleteDC
GetStockObject
SetTextColor
CreateFontIndirectW
DeleteObject
SetBkMode
SetBkColor
CreateFontW
ExtTextOutW
SelectObject

comdlg32

GetOpenFileNameW
GetSaveFileNameW

advapi32

RegEnumValueW
RegCreateKeyExW
RegSetValueExW
RegDeleteKeyW
RegDeleteValueW
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
RegQueryInfoKeyW

shell32

SHBrowseForFolderW
SHGetPathFromIDListW
SHGetMalloc
ShellExecuteW

ole32

CreateStreamOnHGlobal

Sections

.text
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 272KB - Virtual size: 271KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fcdd393a3f2ef3c951f3260166bed3ab

Headers

DLL Characteristics

File Characteristics

Imports

msimg32

comctl32

winmm

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

Sections

.text Size: 36KB - Virtual size: 36KB

.rdata Size: 7KB - Virtual size: 6KB

.data Size: 6KB - Virtual size: 9KB

.rsrc Size: 272KB - Virtual size: 271KB

.text
Size: 36KB - Virtual size: 36KB

.rdata
Size: 7KB - Virtual size: 6KB

.data
Size: 6KB - Virtual size: 9KB

.rsrc
Size: 272KB - Virtual size: 271KB