fa20dd46808329f3d0b4b0f9fcdc07bc_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

fa20dd46808329f3d0b4b0f9fcdc07bc_JaffaCakes118
Size

199KB
MD5

fa20dd46808329f3d0b4b0f9fcdc07bc
SHA1

71c3c3c71c69af5cc5b4d44f28bfdca5e13fc779
SHA256

680366be688678b20bcf088488b4452294796e3e372bcde64d06956736dc6ed0
SHA512

10b6a57c71acf2f0c13a485f649251a0b45fef8cc17cbd0e442802194891042dd08d861f8c77a865cf34740f48d6554b820e16bf4f07173e519378da01cd5471
SSDEEP

3072:D+CWCOvZyol2dVZZ7sHQLUzc9hCCdbJrWRga:rcvICIZZgHQLL9hCCf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fa20dd46808329f3d0b4b0f9fcdc07bc_JaffaCakes118

Files

fa20dd46808329f3d0b4b0f9fcdc07bc_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e9c5b4718337d388a7a1641018adc992

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

SetPixel
CreateDIBSection
GetDCOrgEx
SaveDC
GetRgnBox
CreateCompatibleDC
GetObjectA
RestoreDC
GetDIBits

comdlg32

FindTextA
GetOpenFileNameA
GetSaveFileNameA
ChooseColorA
GetOpenFileNameA
GetFileTitleA
ChooseColorA
GetSaveFileNameA

version

VerQueryValueA
VerFindFileA
VerFindFileA
VerQueryValueA
VerInstallFileA
VerFindFileA
VerQueryValueA

kernel32

LoadLibraryA
IsBadReadPtr
LocalAlloc
ExitProcess
GetModuleHandleA
GetVersionExA
GetLastError
LoadLibraryExA
IsBadHugeReadPtr
ExitThread
GetProcAddress
VirtualAlloc
Sleep

user32

CharLowerA
GetKeyboardState

shlwapi

PathFileExistsA
SHSetValueA
SHQueryValueExA
SHQueryInfoKeyA

ole32

CoCreateFreeThreadedMarshaler

msvcrt

strcmp
mbstowcs
clock
_acmdln
fabs
malloc
exp
log10
memcmp

oleaut32

SysFreeString
VariantChangeType
SafeArrayPtrOfIndex
SafeArrayCreate

shell32

SHGetSpecialFolderLocation
SHGetFolderPathA

advapi32

RegCreateKeyExA
RegOpenKeyA

comctl32

ImageList_Read
ImageList_Write

Sections

.text
Size: 56KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 857B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.DATA9
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.DATA4
Size: 118KB - Virtual size: 118KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.DATA0
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.DATA7
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e9c5b4718337d388a7a1641018adc992

Headers

File Characteristics

Imports

gdi32

comdlg32

version

kernel32

user32

shlwapi

ole32

msvcrt

oleaut32

shell32

advapi32

comctl32

Sections

.text Size: 56KB - Virtual size: 55KB

.data Size: 1024B - Virtual size: 857B

.DATA9 Size: 2KB - Virtual size: 1KB

.DATA4 Size: 118KB - Virtual size: 118KB

.DATA0 Size: 16KB - Virtual size: 15KB

.DATA7 Size: 3KB - Virtual size: 3KB

.rsrc Size: 1KB - Virtual size: 1KB

.text
Size: 56KB - Virtual size: 55KB

.data
Size: 1024B - Virtual size: 857B

.DATA9
Size: 2KB - Virtual size: 1KB

.DATA4
Size: 118KB - Virtual size: 118KB

.DATA0
Size: 16KB - Virtual size: 15KB

.DATA7
Size: 3KB - Virtual size: 3KB

.rsrc
Size: 1KB - Virtual size: 1KB