e0a7dd5241b8b57c3621b5976ebb6f38_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

e0a7dd5241b8b57c3621b5976ebb6f38_JaffaCakes118
Size

115KB
MD5

e0a7dd5241b8b57c3621b5976ebb6f38
SHA1

5386a3ec629a9e8b13e09871d525e81b9cebd145
SHA256

2097e91bff397786d2390021986bfc9c8554650dc7e3e7f40eaeab4bcd1a1d0b
SHA512

5aab6e07afdfced54bdc187dcd46a538ba61406985ac86624ffd3d7bdb049fbf96212af616b6d0c364068f05031d5205cdc21245b2c6d5171edb90ed11531c03
SSDEEP

3072:rvkGO9TMGNG0WycxnvdwOxQZbGL6msFhx2DmdA2:TkGmMGky+iO+GCh0Doz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e0a7dd5241b8b57c3621b5976ebb6f38_JaffaCakes118

Files

e0a7dd5241b8b57c3621b5976ebb6f38_JaffaCakes118
.exe windows:4 windows x86 arch:x86

df16d0d50d9f0595e8777c3d17b69923

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

SHFileOperationA
SHGetFolderPathA
Shell_NotifyIconA

user32

FrameRect
DrawIcon
MapVirtualKeyA
AdjustWindowRectEx
RemoveMenu
MapWindowPoints
SetScrollPos
GetSystemMenu
GetDC
GetMenuItemInfoA
DefWindowProcA
PostQuitMessage
IsWindowEnabled
MsgWaitForMultipleObjects
GetCursorPos
EqualRect
IsRectEmpty
GetSysColorBrush
GetSystemMetrics
GetSubMenu
InflateRect
GetTopWindow
GetKeyboardLayout
GetSysColor
GetFocus
RemovePropA
RegisterClassA
OffsetRect
ScreenToClient
CharLowerBuffA
SetFocus
DrawEdge
ShowScrollBar
UnhookWindowsHookEx
GetMenu
CallNextHookEx
GetActiveWindow
GetKeyState
PostMessageA
CreateMenu
DestroyWindow
IsWindowVisible
RegisterWindowMessageA
GetMessagePos
InvalidateRect
DrawTextA
UnregisterClassA
PeekMessageA
SetParent
GetWindowLongW
InsertMenuItemA
GetWindowPlacement
GetWindowDC
SetCapture
GetKeyboardLayoutNameA
OpenClipboard
DrawAnimatedRects
DrawMenuBar
LoadBitmapA
ShowWindow
GetClassLongA
EnumWindows
GetLastActivePopup
IsIconic
InsertMenuA
GetScrollPos
IsDialogMessageW

version

VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA

gdi32

BitBlt
SetBkColor
CopyEnhMetaFileA
LineTo
GetPaletteEntries
CreateBrushIndirect
GetRgnBox
SetBkMode
GetBitmapBits
SetPixel

kernel32

lstrcmpA
GetFullPathNameA
GetVersionExA
DeleteFileA
GetProcessHeap
ReadFile
CloseHandle
GetLocalTime
ExitThread
CreateThread
GetStringTypeW
LocalFree
VirtualAllocEx
GetProcAddress
LocalAlloc
GetFileType
GetModuleHandleA
VirtualAlloc
GetFileAttributesA
RaiseException
GlobalAlloc
GetCurrentProcess
GetLocaleInfoA

Sections

.text
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 76KB - Virtual size: 75KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 734B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 1024B - Virtual size: 731B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

df16d0d50d9f0595e8777c3d17b69923

Headers

File Characteristics

Imports

shell32

user32

version

gdi32

kernel32

Sections

.text Size: 33KB - Virtual size: 32KB

DATA Size: 3KB - Virtual size: 3KB

.idata Size: 76KB - Virtual size: 75KB

.rdata Size: 1024B - Virtual size: 734B

.tls Size: 1024B - Virtual size: 731B

.text
Size: 33KB - Virtual size: 32KB

DATA
Size: 3KB - Virtual size: 3KB

.idata
Size: 76KB - Virtual size: 75KB

.rdata
Size: 1024B - Virtual size: 734B

.tls
Size: 1024B - Virtual size: 731B