c012c5f7928f83f7b2e568b2c9042ea0_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

c012c5f7928f83f7b2e568b2c9042ea0_JaffaCakes118
Size

418KB
MD5

c012c5f7928f83f7b2e568b2c9042ea0
SHA1

9daf524aed1611557ed24bd278d39e7744cb0198
SHA256

c1679f543f3d350dbb77116c4e929cf4f54b8528455108576ddc0576de9e38e5
SHA512

c788018332adea83e901720313fdfa0dc6c58cf89a5b6dba03750a4ae6a563cbdeaaa3c3fe2ab8e65e96498270c71ae98dc5f22674ac06a1b7b917d9e1fbc58f
SSDEEP

6144:UKS2NNmAd0UPPQhtLY28zw/AZzkcB3Rl5UiIjObyLuEk9AXceI8bl71P1Iwqx8D4:UzE0UP+tLQthf1FyqAXcepJTx8821U+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c012c5f7928f83f7b2e568b2c9042ea0_JaffaCakes118

Files

c012c5f7928f83f7b2e568b2c9042ea0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

383d8dda5e4a05006c07933d59a58007

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

EnumChildWindows
SetDlgItemTextA
GetWindowTextLengthA
CreateDialogParamA
GetWindowRect
MessageBoxIndirectA
GetDlgCtrlID
MessageBoxA
GetWindowTextA
IsWindow
IsWindowVisible
GetWindowThreadProcessId
GetDialogBaseUnits
GetDesktopWindow

ole32

CoGetMarshalSizeMax
CreateGenericComposite
GetRunningObjectTable
DoDragDrop
WriteClassStm
StgSetTimes
CoGetPSClsid
CoReleaseMarshalData
CreateBindCtx
OleCreateLinkToFile

oledlg

ord2
ord8
ord1
ord11
ord10
ord7
ord9
ord3
ord5
ord12
ord4
ord6

oleaut32

LHashValOfNameSysA

comctl32

DrawStatusTextW
CreatePropertySheetPageW
ord15
PropertySheetW
CreatePropertySheetPageA
ord4
CreateStatusWindowW
PropertySheetA
ord6
DestroyPropertySheetPage

shlwapi

StrRChrIW
StrChrIW
StrRChrW
StrRStrIW

kernel32

IsBadCodePtr
CreateMutexA
HeapLock
HeapCompact
OpenMutexA
HeapValidate
LocalFree
OpenEventA
LocalUnlock
VirtualQuery
VirtualQueryEx
GetStringTypeA
GetStartupInfoA
GetProcAddress
VirtualAlloc
GetModuleHandleA
GlobalMemoryStatus

msvcrt

_initterm
_exit
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_heapchk
_XcptFilter
_adjust_fdiv
__setusermatherr
exit
__getmainargs
_acmdln

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 111KB - Virtual size: 110KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 291KB - Virtual size: 370KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

383d8dda5e4a05006c07933d59a58007

Headers

File Characteristics

Imports

user32

ole32

oledlg

oleaut32

comctl32

shlwapi

kernel32

msvcrt

Sections

.text Size: 10KB - Virtual size: 10KB

.rdata Size: 111KB - Virtual size: 110KB

.data Size: 291KB - Virtual size: 370KB

.rsrc Size: 6KB - Virtual size: 5KB

.text
Size: 10KB - Virtual size: 10KB

.rdata
Size: 111KB - Virtual size: 110KB

.data
Size: 291KB - Virtual size: 370KB

.rsrc
Size: 6KB - Virtual size: 5KB