f69a82f54b5dd85f5b921f1b9dbd1a87_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

f69a82f54b5dd85f5b921f1b9dbd1a87_JaffaCakes118
Size

110KB
MD5

f69a82f54b5dd85f5b921f1b9dbd1a87
SHA1

5d8e6dac84fb01674df7b30686db12c5ea4841d5
SHA256

6f083716e2989de888fd2b68475ba2a9d5a5b1f02cf58e0fd238e90c8f7cd325
SHA512

04529068b77b8dabc55821c5bd0fc1f784f804b4f24774adc275b32ed12abe5ca211dee2f4b67786728e1759b40d3d5b6c36782912707ce1e6f1a045153d4d15
SSDEEP

3072:qTLituRA0m03jPhpwPK8SyZm6WF/ZR/9YB0g:10FP7mBSl6eR/9Y

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f69a82f54b5dd85f5b921f1b9dbd1a87_JaffaCakes118

Files

f69a82f54b5dd85f5b921f1b9dbd1a87_JaffaCakes118
.exe windows:4 windows x86 arch:x86

892cc62a9cd22e645e3eb804a60ab5e6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

oleaut32

SafeArrayCreate
SafeArrayGetUBound
RegisterTypeLib
SafeArrayUnaccessData
OleLoadPicture
VariantChangeType

user32

GetWindowThreadProcessId
EndPaint
GetCapture
OpenClipboard
CharLowerBuffA
MessageBeep
SetClipboardData
DrawIconEx
ActivateKeyboardLayout
LoadStringA
InsertMenuItemA
DestroyWindow
ChildWindowFromPoint
SetWindowLongW
SetClassLongA
SetScrollRange
GetKeyState
FindWindowA
MsgWaitForMultipleObjects
IsWindowEnabled
GetMenuItemID
DrawMenuBar
GetActiveWindow
GetKeyboardState
GetCursor
WindowFromPoint
IsIconic
SetPropA
GetMenuItemInfoA
GetClipboardData
CloseClipboard
SetTimer
DestroyMenu
GetWindowDC
IsRectEmpty
ScreenToClient
SendMessageA
PtInRect
GetMenu
GetParent
TranslateMDISysAccel
GetTopWindow
CallNextHookEx
UpdateWindow
SetParent
ReleaseDC
RegisterClassA
GetClassLongA
SystemParametersInfoA
GetMenuItemCount
GetDC
GetWindowLongA
GetWindowTextA
GetClassInfoA
DestroyCursor
SetWindowTextA
BeginPaint
IsZoomed
GetClientRect
IsWindowVisible
GetClassNameA
CharLowerA
GetCursorPos
OffsetRect
GetKeyboardLayoutList
AdjustWindowRectEx
GetLastActivePopup
EnumChildWindows
LoadCursorA
SetRect
SetWindowsHookExA
GetKeyboardLayout
DrawTextA
GetSysColorBrush
DrawAnimatedRects
GetPropA
CreatePopupMenu
CharToOemA
GetSysColor
MoveWindow
IsDialogMessageW
DispatchMessageW
DrawEdge
GetWindowPlacement
GetWindowLongW
GetFocus
CharNextA
GetScrollRange
GetDCEx
GetScrollPos
WaitMessage
EnableMenuItem
EmptyClipboard
UnregisterClassA
RegisterWindowMessageA
GetMenuStringA
IsWindow
GetForegroundWindow
MessageBoxA

ole32

WriteClassStm
MkParseDisplayName
CoGetMalloc
CoReleaseMarshalData
CreateBindCtx
CoCreateInstanceEx
CoRegisterClassObject
CoTaskMemFree
CoRevokeClassObject
CoDisconnectObject

version

VerQueryValueA
GetFileVersionInfoA
VerFindFileA

shell32

SHGetFileInfoA
Shell_NotifyIconA
DragQueryFileA

gdi32

GetBitmapBits
SelectPalette
CreateBitmap
SetBkColor
SaveDC
GetPaletteEntries
CreatePalette
BitBlt
GetDIBits

kernel32

SetEvent
ExitProcess
GetModuleHandleA
GetLocalTime
VirtualAllocEx
Sleep
GetFileType
GetLastError
lstrlenA
GetCPInfo
lstrcatA
ExitThread
LockResource
LocalFree
GlobalAlloc
WriteFile
GetProcAddress

Sections

CODE
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

BSS
Size: 77KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

DATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

892cc62a9cd22e645e3eb804a60ab5e6

Headers

File Characteristics

Imports

oleaut32

user32

ole32

version

shell32

gdi32

kernel32

Sections

CODE Size: 28KB - Virtual size: 27KB

BSS Size: 77KB - Virtual size: 76KB

DATA Size: 4KB - Virtual size: 4KB

CODE
Size: 28KB - Virtual size: 27KB

BSS
Size: 77KB - Virtual size: 76KB

DATA
Size: 4KB - Virtual size: 4KB