ef289bdf50d23f2c1e22c1c1c41eed88_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

ef289bdf50d23f2c1e22c1c1c41eed88_JaffaCakes118
Size

199KB
MD5

ef289bdf50d23f2c1e22c1c1c41eed88
SHA1

650a2db550c956887f508dc45cbe43c72fd95aea
SHA256

9ec20643df89db40b7342734d7de8e8025fa9951b9297778ea648706e569c91e
SHA512

286df5edaa9063f6301b2e0cc68ab0abb85d2d86926403c391d037e16bf978e8203b5dc0b81acc89333ed1248d04c421b368ada65880ab26ddd099ab35c85814
SSDEEP

3072:D+CWCOvZyol2dVZZ7sHQLUzc9hCCdbJrWAga:rcvICIZZgHQLL9hCCf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ef289bdf50d23f2c1e22c1c1c41eed88_JaffaCakes118

Files

ef289bdf50d23f2c1e22c1c1c41eed88_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e9c5b4718337d388a7a1641018adc992

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

SetPixel
CreateDIBSection
GetDCOrgEx
SaveDC
GetRgnBox
CreateCompatibleDC
GetObjectA
RestoreDC
GetDIBits

comdlg32

FindTextA
GetOpenFileNameA
GetSaveFileNameA
ChooseColorA
GetOpenFileNameA
GetFileTitleA
ChooseColorA
GetSaveFileNameA

version

VerQueryValueA
VerFindFileA
VerFindFileA
VerQueryValueA
VerInstallFileA
VerFindFileA
VerQueryValueA

kernel32

LoadLibraryA
IsBadReadPtr
LocalAlloc
ExitProcess
GetModuleHandleA
GetVersionExA
GetLastError
LoadLibraryExA
IsBadHugeReadPtr
ExitThread
GetProcAddress
VirtualAlloc
Sleep

user32

CharLowerA
GetKeyboardState

shlwapi

PathFileExistsA
SHSetValueA
SHQueryValueExA
SHQueryInfoKeyA

ole32

CoCreateFreeThreadedMarshaler

msvcrt

strcmp
mbstowcs
clock
_acmdln
fabs
malloc
exp
log10
memcmp

oleaut32

SysFreeString
VariantChangeType
SafeArrayPtrOfIndex
SafeArrayCreate

shell32

SHGetSpecialFolderLocation
SHGetFolderPathA

advapi32

RegCreateKeyExA
RegOpenKeyA

comctl32

ImageList_Read
ImageList_Write

Sections

.text
Size: 56KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 857B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.DATA9
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.DATA4
Size: 118KB - Virtual size: 118KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.DATA0
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.DATA7
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e9c5b4718337d388a7a1641018adc992

Headers

File Characteristics

Imports

gdi32

comdlg32

version

kernel32

user32

shlwapi

ole32

msvcrt

oleaut32

shell32

advapi32

comctl32

Sections

.text Size: 56KB - Virtual size: 55KB

.data Size: 1024B - Virtual size: 857B

.DATA9 Size: 2KB - Virtual size: 1KB

.DATA4 Size: 118KB - Virtual size: 118KB

.DATA0 Size: 16KB - Virtual size: 15KB

.DATA7 Size: 3KB - Virtual size: 3KB

.rsrc Size: 1KB - Virtual size: 1KB

.text
Size: 56KB - Virtual size: 55KB

.data
Size: 1024B - Virtual size: 857B

.DATA9
Size: 2KB - Virtual size: 1KB

.DATA4
Size: 118KB - Virtual size: 118KB

.DATA0
Size: 16KB - Virtual size: 15KB

.DATA7
Size: 3KB - Virtual size: 3KB

.rsrc
Size: 1KB - Virtual size: 1KB