d9ed377a53bcdbd531374adbe1fcf56c_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

d9ed377a53bcdbd531374adbe1fcf56c_JaffaCakes118
Size

102KB
MD5

d9ed377a53bcdbd531374adbe1fcf56c
SHA1

8b3767c451c32493d4b97e9a64988507a5d561f8
SHA256

22936a767af53e4e84db1def18f48601b16895c1ca168b94e4722badff270460
SHA512

965c19b026500c22f1de0ca25232aefd7f9e5b69059299b48651b8ec09f140348c95ff6c420fa5bdd4846df66135dd8449db5f1cdba2eddee520d5f18a8a479d
SSDEEP

1536:YNS8dJau+12Po9C3xWEn+LhfaSj4/PoaPao1xqbTyWe:4S2+1zCBJ+lfZU5P7KnyW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d9ed377a53bcdbd531374adbe1fcf56c_JaffaCakes118

Files

d9ed377a53bcdbd531374adbe1fcf56c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8413da8e3de694f79828b4b5121589e9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

EnumWindows
GetClientRect
GetCursorPos
SetWindowPos
EnableScrollBar
PostQuitMessage
DestroyWindow
GetDC
SendMessageW
RemoveMenu
MsgWaitForMultipleObjects
PeekMessageA
ActivateKeyboardLayout
GetWindowDC
LoadStringA
RedrawWindow
CreateIcon
SetPropA
GetKeyNameTextA
GetLastActivePopup
SetScrollPos
GetSystemMetrics
GetFocus
OpenClipboard
LoadKeyboardLayoutA
SetScrollRange
EnableMenuItem
GetMenuItemCount
EnumChildWindows
IsRectEmpty
SendMessageA
DeleteMenu
IsChild
DestroyCursor
SetForegroundWindow
RegisterWindowMessageA
IsDialogMessageW
LoadIconA
MoveWindow
GetCapture
SetParent
SetActiveWindow
CharToOemA
DrawEdge
MapVirtualKeyA
InsertMenuItemA
GetActiveWindow
GetDesktopWindow
PeekMessageW
GetWindowRect
WindowFromPoint
ScreenToClient
GetMenuState
GetScrollInfo
EqualRect
CallNextHookEx
SetClipboardData
LoadBitmapA
CharNextA
CharLowerA
SetWindowPlacement
AdjustWindowRectEx
SetCursor
DefWindowProcA
IsDialogMessageA
DefFrameProcA
CallWindowProcA
GetKeyboardState
SetMenu
IsWindow
GetIconInfo
PostMessageA
GetDCEx
GetScrollRange
InflateRect
CharLowerBuffA
CheckMenuItem
ClientToScreen
ChildWindowFromPoint
TrackPopupMenu
CharUpperBuffA
IsWindowEnabled
DrawTextA
ScrollWindow
DispatchMessageW
EnumThreadWindows
IsZoomed
GetSysColorBrush
GetForegroundWindow
DispatchMessageA
DestroyMenu
ShowOwnedPopups
PtInRect
MapWindowPoints
GetClassInfoA
GetMenuItemInfoA

kernel32

VirtualAllocEx
GetModuleHandleA
EnumCalendarInfoA
GetStartupInfoA
ExitProcess
GlobalAlloc
WaitForSingleObject
SetEndOfFile
FreeResource
SetLastError
lstrcmpA
FormatMessageA
LoadResource
GetCommandLineA
GetProcAddress
lstrcpyA
SetEvent

shell32

SHGetDesktopFolder
SHGetFolderPathA
Shell_NotifyIconA

version

VerFindFileA
GetFileVersionInfoSizeA

gdi32

GetDIBColorTable
SelectObject
GetPaletteEntries
GetRgnBox
CreateFontIndirectA
BitBlt
CreateBrushIndirect
GetDIBits

Sections

.text
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.tls
Size: 67KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

DATA
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

BSS
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8413da8e3de694f79828b4b5121589e9

Headers

File Characteristics

Imports

user32

kernel32

shell32

version

gdi32

Sections

.text Size: 27KB - Virtual size: 27KB

.tls Size: 67KB - Virtual size: 67KB

.idata Size: 3KB - Virtual size: 2KB

DATA Size: 2KB - Virtual size: 1KB

BSS Size: 1KB - Virtual size: 1KB

.text
Size: 27KB - Virtual size: 27KB

.tls
Size: 67KB - Virtual size: 67KB

.idata
Size: 3KB - Virtual size: 2KB

DATA
Size: 2KB - Virtual size: 1KB

BSS
Size: 1KB - Virtual size: 1KB