febda020fc2b518ffecccd1b7d84d21e_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

febda020fc2b518ffecccd1b7d84d21e_JaffaCakes118
Size

104KB
MD5

febda020fc2b518ffecccd1b7d84d21e
SHA1

a79f43a68da9c1576c65a564b7b9eae2c6985964
SHA256

618e3f0b8523586900dce3757a6f7cfbb7bc8f4d20b58f897f728f0b2ca5883a
SHA512

96a8af171506dc5ceb579cb299ff75bb4c0200f17c214ad836f0d424ba7bd1e44266921c3c970cd54bd6cffb49feeadba9423bd66ba3670af46c737405cea231
SSDEEP

1536:j9pltbVlBncxXrqyKa+oDMNeBccrXVolYXu:j97tbVlBCrCa+5wBccrXVmYX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
febda020fc2b518ffecccd1b7d84d21e_JaffaCakes118

Files

febda020fc2b518ffecccd1b7d84d21e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

02972bd0624fe390c607dd267ce3df28

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetDC
AppendMenuW
IsMenu
DialogBoxParamW
GetDlgItem
CloseWindow
GetFocus
CopyIcon
DrawIconEx
GetCursor
AlignRects
BlockInput
InsertMenuA
CopyImage
AppendMenuA
DrawTextW
DialogBoxParamA
GetMenu

gdi32

DeleteObject
CopyMetaFileA
ClearBitmapAttributes
CancelDC
BeginPath
AddFontResourceExW
AddFontResourceA
ExtTextOutA
CloseMetaFile
CreateSolidBrush
GetBitmapBits
AddFontMemResourceEx
CloseFigure
AddFontResourceExA
CopyMetaFileA
GetDCOrgEx
GetPixel
AbortPath
ClearBrushAttributes
GetClipBox
ExcludeClipRect

advapi32

RegQueryValueA
RegEnumKeyA
RegReplaceKeyA
RegGetKeySecurity
RegCreateKeyW
RegOpenKeyW
RegCreateKeyExA
RegEnumKeyExA
RegReplaceKeyW
RegEnumKeyW
RegLoadKeyW
RegDeleteKeyW
RegDeleteKeyA
RegDeleteValueW
RegOpenKeyExW
RegQueryValueW

comctl32

ImageList_LoadImageW
ImageList_AddMasked
ImageList_BeginDrag
ImageList_Copy
ImageList_Remove
ImageList_DrawIndirect
ImageList_GetIcon
ImageList_AddIcon
ImageList_Destroy
ImageList_DragMove
ImageList_Replace
ImageList_GetIconSize
ImageList_GetDragImage
ImageList_GetImageInfo
ImageList_AddIcon
ImageList_Copy
ImageList_ReplaceIcon
ImageList_Merge
ImageList_DrawIndirect
ImageList_EndDrag
ImageList_LoadImage
ImageList_GetImageCount
ImageList_Remove
ImageList_Draw
ImageList_Read
ImageList_BeginDrag
ImageList_DrawEx
ImageList_AddMasked
ImageList_DragLeave
ImageList_GetIconSize
ImageList_LoadImageA
ImageList_GetImageRect
ImageList_Read
ImageList_ReplaceIcon
ImageList_GetDragImage
ImageList_DrawIndirect
ImageList_DragLeave
ImageList_Create
InitCommonControls
ImageList_GetImageCount
ImageList_LoadImage
ImageList_DrawEx
ImageList_GetIcon
ImageList_Create
InitCommonControls
ImageList_LoadImage
ImageList_EndDrag
ImageList_GetImageInfo
ImageList_LoadImageW
ImageList_DragMove
ImageList_DragEnter
ImageList_Merge
ImageList_Destroy

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 68KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

02972bd0624fe390c607dd267ce3df28

Headers

File Characteristics

Imports

user32

gdi32

advapi32

comctl32

Sections

.text Size: 8KB - Virtual size: 7KB

.data Size: 68KB - Virtual size: 66KB

.tls Size: 4KB - Virtual size: 4KB

.rdata Size: 8KB - Virtual size: 5KB

.idata Size: 8KB - Virtual size: 4KB

.rsrc Size: 4KB - Virtual size: 52KB

.text
Size: 8KB - Virtual size: 7KB

.data
Size: 68KB - Virtual size: 66KB

.tls
Size: 4KB - Virtual size: 4KB

.rdata
Size: 8KB - Virtual size: 5KB

.idata
Size: 8KB - Virtual size: 4KB

.rsrc
Size: 4KB - Virtual size: 52KB