c8b03037c22058729a94ba7ed8e363c0_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

c8b03037c22058729a94ba7ed8e363c0_JaffaCakes118
Size

323KB
MD5

c8b03037c22058729a94ba7ed8e363c0
SHA1

d2653c6d0f95cc677cf7042f9b11d8cbb9e25721
SHA256

d7161c626707647c9116dfbe2b7edc209d95d9ddaba7bd2514ec851b4e6e506f
SHA512

833429ec4f49da1a5343220d6845d6754d854ed41dcb8f2d5c5cbba863385248820bca85f00f1a72cac58431a84a98d9dad604713053deb5b57b54c3732ee373
SSDEEP

6144:qW+BIKnX7niAhsmNaYSSYOV6Io0OcLpVpj7FY8jXKSZKMatm80aHhdL:q1Lnph6YSdOVzvj6IKSZKMR80IL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c8b03037c22058729a94ba7ed8e363c0_JaffaCakes118

Files

c8b03037c22058729a94ba7ed8e363c0_JaffaCakes118
.exe windows:5 windows x86 arch:x86

fcdd393a3f2ef3c951f3260166bed3ab

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msimg32

AlphaBlend
TransparentBlt

comctl32

InitCommonControlsEx

winmm

mixerGetNumDevs
mixerGetDevCapsW
mixerGetLineInfoW

kernel32

lstrcatW
GetLastError
CreateMutexW
CreateFileW
FreeLibrary
GetModuleFileNameW
GetProcAddress
LoadLibraryW
GetVersionExW
ExitProcess
GetTickCount
GetVersion
GetCurrentProcess
FreeResource
WriteFile
CloseHandle
lstrcmpiW
lstrcpynW
GetModuleHandleW
lstrlenW
FindResourceW
SizeofResource
LoadResource
LockResource
GlobalAlloc
GlobalLock
GetLogicalDriveStringsW
lstrcpyW
GetDriveTypeW
GetProcessHeap
HeapAlloc
HeapSize
HeapFree
ReadFile

user32

CallWindowProcW
SetWindowLongW
DialogBoxParamW
SetForegroundWindow
FindWindowW
IsDlgButtonChecked
CheckDlgButton
CreateDialogIndirectParamW
GetWindowLongW
DestroyIcon
LoadIconW
DeleteMenu
GetSubMenu
GetMenu
IsCharAlphaW
IsCharAlphaNumericW
MessageBoxW
PostMessageW
GetSysColorBrush
DestroyMenu
DialogBoxIndirectParamW
AppendMenuW
CreatePopupMenu
LoadStringW
GetFocus
GetDlgCtrlID
SetFocus
GetCursorPos
TrackPopupMenu
GetKeyNameTextW
EndDialog
SystemParametersInfoW
GetSystemMetrics
GetWindowRect
MapWindowPoints
LoadCursorW
SetCursor
EnableWindow
ShowWindow
RedrawWindow
GetDC
FillRect
DrawTextW
CreateWindowExW
SetWindowPos
GetClientRect
wsprintfW
SetWindowTextW
SetDlgItemTextW
GetDlgItem
SendMessageW
LoadBitmapW

gdi32

CreateCompatibleDC
GetTextExtentPoint32W
GetDeviceCaps
DeleteDC
GetStockObject
SetTextColor
CreateFontIndirectW
DeleteObject
SetBkMode
SetBkColor
CreateFontW
ExtTextOutW
SelectObject

comdlg32

GetOpenFileNameW
GetSaveFileNameW

advapi32

RegEnumValueW
RegCreateKeyExW
RegSetValueExW
RegDeleteKeyW
RegDeleteValueW
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
RegQueryInfoKeyW

shell32

SHBrowseForFolderW
SHGetPathFromIDListW
SHGetMalloc
ShellExecuteW

ole32

CreateStreamOnHGlobal

Sections

.text
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 272KB - Virtual size: 271KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fcdd393a3f2ef3c951f3260166bed3ab

Headers

DLL Characteristics

File Characteristics

Imports

msimg32

comctl32

winmm

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

Sections

.text Size: 36KB - Virtual size: 36KB

.rdata Size: 7KB - Virtual size: 6KB

.data Size: 6KB - Virtual size: 9KB

.rsrc Size: 272KB - Virtual size: 271KB

.text
Size: 36KB - Virtual size: 36KB

.rdata
Size: 7KB - Virtual size: 6KB

.data
Size: 6KB - Virtual size: 9KB

.rsrc
Size: 272KB - Virtual size: 271KB