b35e4fbb3024613e795a3d4d748d3c32_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

b35e4fbb3024613e795a3d4d748d3c32_JaffaCakes118
Size

110KB
MD5

b35e4fbb3024613e795a3d4d748d3c32
SHA1

7b36fbf0807a48f46ebb1d047804bc2364b14c10
SHA256

05bada2c348d0b228e6bb7237dd079a04a3b23e5070b6f11e73cb5b56e1f9326
SHA512

e678e53bb2d7be246436e7198e2abb6e2c81a7bc0b9f67f639f1f739cc6c98c7179247c02a0b4c050fd384ef7849313b7b2de975140102bd09ba4c6257a89c59
SSDEEP

3072:qTLituRA0m03jPhpwPK8SyZm6WF/ZR/9YB0M:10FP7mBSl6eR/9Y

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b35e4fbb3024613e795a3d4d748d3c32_JaffaCakes118

Files

b35e4fbb3024613e795a3d4d748d3c32_JaffaCakes118
.exe windows:4 windows x86 arch:x86

892cc62a9cd22e645e3eb804a60ab5e6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

oleaut32

SafeArrayCreate
SafeArrayGetUBound
RegisterTypeLib
SafeArrayUnaccessData
OleLoadPicture
VariantChangeType

user32

GetWindowThreadProcessId
EndPaint
GetCapture
OpenClipboard
CharLowerBuffA
MessageBeep
SetClipboardData
DrawIconEx
ActivateKeyboardLayout
LoadStringA
InsertMenuItemA
DestroyWindow
ChildWindowFromPoint
SetWindowLongW
SetClassLongA
SetScrollRange
GetKeyState
FindWindowA
MsgWaitForMultipleObjects
IsWindowEnabled
GetMenuItemID
DrawMenuBar
GetActiveWindow
GetKeyboardState
GetCursor
WindowFromPoint
IsIconic
SetPropA
GetMenuItemInfoA
GetClipboardData
CloseClipboard
SetTimer
DestroyMenu
GetWindowDC
IsRectEmpty
ScreenToClient
SendMessageA
PtInRect
GetMenu
GetParent
TranslateMDISysAccel
GetTopWindow
CallNextHookEx
UpdateWindow
SetParent
ReleaseDC
RegisterClassA
GetClassLongA
SystemParametersInfoA
GetMenuItemCount
GetDC
GetWindowLongA
GetWindowTextA
GetClassInfoA
DestroyCursor
SetWindowTextA
BeginPaint
IsZoomed
GetClientRect
IsWindowVisible
GetClassNameA
CharLowerA
GetCursorPos
OffsetRect
GetKeyboardLayoutList
AdjustWindowRectEx
GetLastActivePopup
EnumChildWindows
LoadCursorA
SetRect
SetWindowsHookExA
GetKeyboardLayout
DrawTextA
GetSysColorBrush
DrawAnimatedRects
GetPropA
CreatePopupMenu
CharToOemA
GetSysColor
MoveWindow
IsDialogMessageW
DispatchMessageW
DrawEdge
GetWindowPlacement
GetWindowLongW
GetFocus
CharNextA
GetScrollRange
GetDCEx
GetScrollPos
WaitMessage
EnableMenuItem
EmptyClipboard
UnregisterClassA
RegisterWindowMessageA
GetMenuStringA
IsWindow
GetForegroundWindow
MessageBoxA

ole32

WriteClassStm
MkParseDisplayName
CoGetMalloc
CoReleaseMarshalData
CreateBindCtx
CoCreateInstanceEx
CoRegisterClassObject
CoTaskMemFree
CoRevokeClassObject
CoDisconnectObject

version

VerQueryValueA
GetFileVersionInfoA
VerFindFileA

shell32

SHGetFileInfoA
Shell_NotifyIconA
DragQueryFileA

gdi32

GetBitmapBits
SelectPalette
CreateBitmap
SetBkColor
SaveDC
GetPaletteEntries
CreatePalette
BitBlt
GetDIBits

kernel32

SetEvent
ExitProcess
GetModuleHandleA
GetLocalTime
VirtualAllocEx
Sleep
GetFileType
GetLastError
lstrlenA
GetCPInfo
lstrcatA
ExitThread
LockResource
LocalFree
GlobalAlloc
WriteFile
GetProcAddress

Sections

CODE
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

BSS
Size: 77KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

DATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

892cc62a9cd22e645e3eb804a60ab5e6

Headers

File Characteristics

Imports

oleaut32

user32

ole32

version

shell32

gdi32

kernel32

Sections

CODE Size: 28KB - Virtual size: 27KB

BSS Size: 77KB - Virtual size: 76KB

DATA Size: 4KB - Virtual size: 4KB

CODE
Size: 28KB - Virtual size: 27KB

BSS
Size: 77KB - Virtual size: 76KB

DATA
Size: 4KB - Virtual size: 4KB