e12acd5a9e10723bfe7df0b039fc6918_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

e12acd5a9e10723bfe7df0b039fc6918_JaffaCakes118
Size

125KB
MD5

e12acd5a9e10723bfe7df0b039fc6918
SHA1

50635dece19f4c1f936100ba71e9a948d5731b73
SHA256

101d92dee33d4ab5ea2852035a03b5ef2abfa84fd6bf3dff7729bc279eac0839
SHA512

8da63dd3124dc6e1a57e1e5af774af44f77e327f7618823680b593e3f8c14ba201328058582b1c20818d7a764444095eee80aabc96946539753ccf69afa114ce
SSDEEP

3072:ILlIukbttAOQuIbzh3NHq03sDO//ZwQ50TNHlZXm1O:SuF0SWNH3sS/XurZ2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e12acd5a9e10723bfe7df0b039fc6918_JaffaCakes118

Files

e12acd5a9e10723bfe7df0b039fc6918_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e17254c56b2a5c89345dc75170bde2f9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comdlg32

GetFileTitleA
ChooseColorA
GetOpenFileNameA

gdi32

CopyEnhMetaFileA
CreateCompatibleBitmap
SaveDC
CreateBrushIndirect
GetPaletteEntries
LineTo
GetCurrentPositionEx
CreatePenIndirect

version

VerFindFileA

shell32

SHGetSpecialFolderLocation

user32

SetMenuItemInfoA
SetWindowLongW
SetCursor
SetFocus
SetScrollRange
SetWindowPlacement
SetClipboardData
SetScrollInfo
SystemParametersInfoA
UnregisterClassA
SetPropA
TrackPopupMenu
TranslateMDISysAccel
ShowWindow
SetWindowTextA
UnhookWindowsHookEx
SetScrollPos
SetCapture
ShowOwnedPopups
SetClassLongA
SetTimer
SetParent
SetMenu
SetWindowsHookExA
ShowScrollBar
TranslateMessage
SetForegroundWindow
SetRect
SetWindowPos
SetWindowLongA

kernel32

GetLastError
VirtualQuery
CompareStringA
CreateEventA
WriteFile
lstrcmpA
GetCommandLineA
GetCPInfo
FreeResource
SetEvent
GetStartupInfoA
GetVersionExA
GetModuleHandleA
VirtualAlloc
MoveFileExA
GetOEMCP
SizeofResource
GetFileType
GetProcAddress
LoadLibraryA
GlobalAddAtomA
GetACP
GetDateFormatA
IsBadReadPtr
MoveFileA
FreeLibrary
GetModuleHandleW
GetTickCount
GetStdHandle
GetCurrentThread
ExitThread
LockResource
GetFileSize
GetDiskFreeSpaceA
LocalAlloc
GetFullPathNameA
SetFilePointer
LoadResource
SetLastError
GetModuleFileNameA
GetThreadLocale
GetCurrentProcess
EnumCalendarInfoA
CloseHandle
GlobalAlloc
WaitForSingleObject
FindResourceA
ResetEvent
CreateFileA
HeapAlloc
GetProcessHeap
LoadLibraryExA
HeapFree
ReadFile
GetEnvironmentStrings
ExitProcess
GetVersion
VirtualAllocEx
lstrlenA
GlobalFindAtomA
IsBadHugeReadPtr
GetUserDefaultLCID

Sections

.text
Size: 42KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.fdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ddata
Size: 64KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 884B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e17254c56b2a5c89345dc75170bde2f9

Headers

File Characteristics

Imports

comdlg32

gdi32

version

shell32

user32

kernel32

Sections

.text Size: 42KB - Virtual size: 42KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 8KB - Virtual size: 8KB

.fdata Size: 1KB - Virtual size: 1KB

.ddata Size: 64KB - Virtual size: 63KB

.gdata Size: 2KB - Virtual size: 1KB

.rsrc Size: 1024B - Virtual size: 884B

.text
Size: 42KB - Virtual size: 42KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 8KB - Virtual size: 8KB

.fdata
Size: 1KB - Virtual size: 1KB

.ddata
Size: 64KB - Virtual size: 63KB

.gdata
Size: 2KB - Virtual size: 1KB

.rsrc
Size: 1024B - Virtual size: 884B