c1c2a5e7332b224bc823f861bace877a_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

c1c2a5e7332b224bc823f861bace877a_JaffaCakes118
Size

109KB
MD5

c1c2a5e7332b224bc823f861bace877a
SHA1

91de9e92f003fafe50e0ecbedc60dedde37915fd
SHA256

035fa22d341703ac2b21208be64af2307885c8978f5b2dd6d3c5d8761c95cc0c
SHA512

159f5242c87ca7618c5d03d36cf55c25c2186d5a21cad8d5029be4e45492435a79dfd9be0aecb9d05b907c7f523f63d67ce8d019d963b1dc015102df4989a68c
SSDEEP

3072:SD3Hl5JVSa4GhR+lbTlVd3c6h2o1DNot:y3Xok+llLQo+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c1c2a5e7332b224bc823f861bace877a_JaffaCakes118

Files

c1c2a5e7332b224bc823f861bace877a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9afe34dba538b7c56ec58a1f72c11674

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

oleaut32

SysStringLen

shlwapi

SHQueryInfoKeyA
SHEnumValueA
SHSetValueA
SHStrDupA
SHQueryValueExA
PathIsDirectoryA
SHDeleteValueA
SHGetValueA
PathFileExistsA

version

VerFindFileA
GetFileVersionInfoA
VerInstallFileA

user32

IsRectEmpty
MapVirtualKeyA
GetTopWindow
GetCursorPos
SetParent
GetMenu
GetIconInfo
SetWindowPos
MsgWaitForMultipleObjects
GetScrollRange
IsDialogMessageW
GetKeyNameTextA
CallWindowProcA
GetSubMenu
TranslateMDISysAccel
SetMenu
ReleaseDC
DefWindowProcA
PtInRect
AdjustWindowRectEx
GetWindowTextA
OemToCharA
DrawMenuBar
SetScrollPos
SetForegroundWindow
GetSysColorBrush
GetWindowThreadProcessId
CreateIcon
EnumChildWindows
CreateMenu
ShowWindow
ActivateKeyboardLayout
DestroyIcon
TrackPopupMenu
DefMDIChildProcA
GetWindowDC
GetMenuItemID
CreateWindowExA
MessageBeep
InsertMenuA
GetSysColor
IsWindow
CharNextW
GetKeyboardLayoutList
DrawEdge
SetWindowLongW
GetWindowPlacement
GetMenuItemCount
DestroyWindow
DestroyCursor
DrawIcon
LoadIconA
GetDlgItem
CloseClipboard
LoadStringA
GetFocus
SetWindowPlacement
RegisterWindowMessageA
SetClassLongA
DrawAnimatedRects
CharLowerA
SetWindowTextA
GetMenuStringA
EndPaint
InflateRect
DispatchMessageW
WaitMessage
MessageBoxA
GetWindow
SetClipboardData
GetKeyState
CheckMenuItem
GetForegroundWindow
InsertMenuItemA
CharToOemA
FindWindowA
DrawIconEx
GetClassLongA
wsprintfA
EnumWindows
SendMessageA
GetCursor
PostQuitMessage
GetKeyboardType
IsChild
SetWindowLongA
GetActiveWindow
IsWindowEnabled
EnableScrollBar
PeekMessageA
InvalidateRect
GetMessagePos
ClientToScreen
SetScrollRange
DrawFrameControl
DeleteMenu
GetMenuItemInfoA
SendMessageW
GetKeyboardState
IsDialogMessageA
RemoveMenu
ReleaseCapture
LoadBitmapA
SetPropA
PeekMessageW
EnableWindow
GetKeyboardLayoutNameA
GetSystemMetrics
BeginPaint
GetWindowRect
LoadCursorA
DefFrameProcA
SetCursor
GetCapture
GetClipboardData
GetWindowLongW
EnumThreadWindows
OffsetRect
SetRect
FrameRect
ScrollWindow
SystemParametersInfoA
MapWindowPoints
SetCapture
ScreenToClient
GetScrollPos
EqualRect
CallNextHookEx
OpenClipboard
GetDC
DestroyMenu
SetScrollInfo
ShowScrollBar
SetFocus
SetActiveWindow
UnhookWindowsHookEx
SetTimer
ChildWindowFromPoint
CharUpperBuffA
GetKeyboardLayout
KillTimer
GetClassNameA
ShowOwnedPopups
MoveWindow
CreatePopupMenu
SetMenuItemInfoA
UpdateWindow
UnregisterClassA
GetClassInfoA
GetDCEx
GetScrollInfo
EmptyClipboard
IsZoomed
DrawTextA
WindowFromPoint
GetDesktopWindow
GetSystemMenu
RegisterClipboardFormatA
SetWindowsHookExA
PostMessageA
FillRect
GetLastActivePopup
RegisterClassA
GetParent
DispatchMessageA
EnableMenuItem
RemovePropA
GetPropA
IsWindowVisible
GetClientRect
GetWindowLongA
CharNextA
LoadKeyboardLayoutA
GetMenuState
IsIconic
TranslateMessage
IntersectRect

kernel32

GetOEMCP
VirtualAllocEx
EnterCriticalSection
LoadResource
GetProcAddress
lstrcpynA
GetVersionExA
GlobalAlloc
GetCommandLineA
SizeofResource
LoadLibraryA
ExitProcess
GetModuleHandleA
CloseHandle
lstrlenA

shell32

SHGetFolderPathA
SHGetSpecialFolderLocation
Shell_NotifyIconA
SHFileOperationA
SHGetDesktopFolder

gdi32

GetDIBColorTable
SelectPalette
SetPixel
GetBitmapBits
GetCurrentPositionEx
GetClipBox
SetBkMode

advapi32

RegEnumKeyExA
RegDeleteValueA
RegEnumKeyA

Sections

CODE
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 69KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 512B - Virtual size: 463B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9afe34dba538b7c56ec58a1f72c11674

Headers

File Characteristics

Imports

oleaut32

shlwapi

version

user32

kernel32

shell32

gdi32

advapi32

Sections

CODE Size: 31KB - Virtual size: 31KB

.rdata Size: 6KB - Virtual size: 6KB

.data Size: 69KB - Virtual size: 69KB

.edata Size: 512B - Virtual size: 463B

CODE
Size: 31KB - Virtual size: 31KB

.rdata
Size: 6KB - Virtual size: 6KB

.data
Size: 69KB - Virtual size: 69KB

.edata
Size: 512B - Virtual size: 463B