ea0b8db3183f66cf45967f0d89af2036_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

ea0b8db3183f66cf45967f0d89af2036_JaffaCakes118
Size

121KB
MD5

ea0b8db3183f66cf45967f0d89af2036
SHA1

4b57ec685c9db245db91df4f90c1ac9dfd9f31f3
SHA256

3145af1831a2eceea89fcaaac784ee542dcdf72a32c038a10839c5a62f5a8fb3
SHA512

20a86a5a085d43b0e58ca723c3c872d9a464127782a2637660ac8f5dc74551faf77ba8f0ed6bef5dcf924ad19357f4353f278fdbe503cd8418f79f2e06f75e1c
SSDEEP

3072:SaQo03t0dZeVXq8xNR6tgR07WtU/WbfI1ZTMqVdWBO:10BXR0SUSaMqVN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ea0b8db3183f66cf45967f0d89af2036_JaffaCakes118

Files

ea0b8db3183f66cf45967f0d89af2036_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7d1e4fd2323ccd3397e6069b63cc0f2d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

ExtractIconExA
SHGetSpecialFolderPathW
ShellExecuteExA

user32

GetDesktopWindow
SetWindowPos
EndDialog
FillRect
IsWindowVisible
GetDlgItemTextA
CharPrevA
GetParent
SystemParametersInfoA
EnableWindow
DestroyWindow
RegisterClassA
DrawTextA
CharNextA
PostQuitMessage
LoadBitmapA
GetWindowTextA
CreateDialogParamA
SetDlgItemTextA
SendDlgItemMessageA
GetDlgItem
GetClientRect
SetRect
GetWindowRect
LoadIconA
LoadCursorA
EndPaint
SetClassLongA
ScreenToClient
BeginPaint

urlmon

CreateURLMoniker

kernel32

WaitForSingleObject
GetProcessHeap
GetLocaleInfoA
IsValidCodePage
HeapAlloc
FindVolumeClose
FileTimeToLocalFileTime
FindFirstFileA
lstrcpynA
FindClose
VirtualFree
LCMapStringW
GetConsoleScreenBufferInfo
InitializeCriticalSection
GetStdHandle
SetEnvironmentVariableA
GetDriveTypeA
HeapFree
GetVolumeInformationA
GetShortPathNameA
LocalUnlock
CompareStringA
GetFileAttributesA
GetCurrentProcess
GetLocaleInfoW
GetDriveTypeA
GetVersionExA
GetConsoleMode
GetEnvironmentVariableA
GetModuleHandleA
LoadLibraryA
SetStdHandle
lstrcmpiA
SetConsoleMode
SetVolumeLabelA
GetStringTypeA
GetUserDefaultUILanguage
GetSystemTime
LCMapStringA
GetStringTypeW
LeaveCriticalSection
GetTimeZoneInformation
GetStartupInfoA
ReleaseMutex
GetFileTime
FileTimeToSystemTime
CreateMutexA
GetModuleFileNameA
GetModuleHandleExW
SetThreadPriorityBoost
GetUserDefaultLCID
HeapDestroy
VirtualAlloc
InterlockedExchange
GetFileType
SetHandleCount
CreateFileA
CompareStringW
FindNextFileA
IsValidLocale
GetFullPathNameA
HeapCreate
GetLocalTime
LocalLock
GetProcAddress
Sleep
EnumSystemLocalesA
FlushFileBuffers
WideCharToMultiByte
ExitProcess
lstrlenA
SetConsoleCtrlHandler

gdi32

GetNearestColor
OffsetClipRgn
CreateRectRgn
GetStockObject
GetClipRgn
SetBkColor
CreatePen
IntersectClipRect
SetTextColor
SelectObject

ole32

OleUninitialize
CoCreateInstance
OleInitialize

shlwapi

PathRemoveBackslashA
PathFileExistsW
SHDeleteValueA

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 171KB - Virtual size: 172KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

zonnvec
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

7d1e4fd2323ccd3397e6069b63cc0f2d

Headers

File Characteristics

Imports

shell32

user32

urlmon

kernel32

gdi32

ole32

shlwapi

Sections

.text Size: 8KB - Virtual size: 8KB

.data Size: 4KB - Virtual size: 33KB

.rsrc Size: 2KB - Virtual size: 1KB

.rdata Size: 171KB - Virtual size: 172KB

zonnvec Size: - Virtual size: 4KB

.text
Size: 8KB - Virtual size: 8KB

.data
Size: 4KB - Virtual size: 33KB

.rsrc
Size: 2KB - Virtual size: 1KB

.rdata
Size: 171KB - Virtual size: 172KB

zonnvec
Size: - Virtual size: 4KB