eae7d39bc10da84d651c8465f36aff3f_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

eae7d39bc10da84d651c8465f36aff3f_JaffaCakes118
Size

442KB
MD5

eae7d39bc10da84d651c8465f36aff3f
SHA1

9171fdc74996ce6dd0df66482bae244c8713e9fb
SHA256

426358353afa027e6d53d8940edefd55383359ce9616e36206d07a6b2e880f15
SHA512

89ecd8cd6a039345361939a6a55d2c38419663d42b60b4c5112b5281e17c05711ec6bcaa2a1e9cf113275288b214a8691dc13dde4908f10a1241f075170a9827
SSDEEP

6144:ET2DW0BC85ILTfTyOk8vnajXNjuYxvyrSDlDO/GgjgNGQ32VMnLvpZ+MNPq2d35:pVVgmOkiNYxf8/GJNGQWELvT1NPVZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eae7d39bc10da84d651c8465f36aff3f_JaffaCakes118

Files

eae7d39bc10da84d651c8465f36aff3f_JaffaCakes118
.exe windows:5 windows x86 arch:x86

d7a5fc44a7e0aeb6f10d491263bc4108

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

shell32

SHGetFolderPathW
SHOpenFolderAndSelectItems
ShellExecuteW
SHGetPathFromIDListW
SHGetMalloc
ord748

user32

TranslateAcceleratorW
GetPropW
GetDlgItem
GetWindowTextLengthW
RegisterClassExW
SetDlgItemTextW
InflateRect
GetFocus
DeferWindowPos
CallWindowProcW
DialogBoxParamW
LoadImageW
GetLastActivePopup
IsRectEmpty
DispatchMessageW
IsWindow
IntersectRect
MessageBeep
GetCapture
SendDlgItemMessageW
GetSystemMetrics
GetWindowTextW
CopyImage
GetSysColorBrush
EndDialog
SetCapture
EndDeferWindowPos
MessageBoxIndirectW
ReleaseCapture
GetClassNameW
DestroyIcon
RegisterWindowMessageW

gdiplus

GdipSaveAddImage
GdipGetImageRawFormat
GdipGetImageEncodersSize
GdipFree
GdipGetImageHeight
GdipDrawImageI
GdipDisposeImage
GdipLoadImageFromFile
GdipCreateBitmapFromHBITMAP
GdipCreateHBITMAPFromBitmap

shlwapi

ord174
StrCpyNW
PathFindExtensionW

gdi32

StretchBlt
CreateCompatibleDC
MoveToEx
CreateCompatibleBitmap
Ellipse
GetStockObject
SetLayout
SetStretchBltMode
CreatePenIndirect
CreateSolidBrush

advapi32

RegEnumValueW
RegCloseKey

ole32

CoAllowSetForegroundWindow
StringFromIID
StringFromCLSID

kernel32

UnmapViewOfFile
DeleteFileW
FindClose
WaitForSingleObject
lstrlenW
ResetEvent
GetModuleHandleA
TerminateProcess
LocalFileTimeToFileTime
GetCurrentProcess
LoadResource
CreateDirectoryW
GetTickCount
UnhandledExceptionFilter
InterlockedIncrement
FormatMessageW
GetHandleInformation
VirtualAllocEx
GetShortPathNameW
GetFileAttributesW
SizeofResource
WaitForSingleObject
OpenFileMappingW
GetSystemDirectoryW
CreateEventA
FindFirstFileW
CreateFileMappingW
FreeLibrary
LocalFree
CreateThread

msvcrt

wcsncpy
realloc
_c_exit
wcstol
?terminate@@YAXXZ
wcscpy
_wcmdln
_vsnwprintf
__RTDynamicCast
_except_handler3
_adjust_fdiv
free
_exit

Sections

.text
Size: 399KB - Virtual size: 399KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 296KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d7a5fc44a7e0aeb6f10d491263bc4108

Headers

DLL Characteristics

File Characteristics

Imports

shell32

user32

gdiplus

shlwapi

gdi32

advapi32

ole32

kernel32

msvcrt

Sections

.text Size: 399KB - Virtual size: 399KB

.data Size: 35KB - Virtual size: 34KB

.rsrc Size: 6KB - Virtual size: 296KB

.text
Size: 399KB - Virtual size: 399KB

.data
Size: 35KB - Virtual size: 34KB

.rsrc
Size: 6KB - Virtual size: 296KB