03824e759f241d4c7addfe70a16d7057_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

03824e759f241d4c7addfe70a16d7057_JaffaCakes118
Size

108KB
MD5

03824e759f241d4c7addfe70a16d7057
SHA1

4a4af60b0410e8f051af1a32e16fb0c9b199af65
SHA256

c9b8f64a0b91c6695a8e5e60dc955eba736c91b2cb9e4fb34615d0b371143b6e
SHA512

7b6a107a3c64ba97617d21d0a7a3f15f551e03af78f1e79d5b172d2b89708361a2e120717fa48931e4ca2f827b67df11223afca10a14bf4b2935812a293e4d67
SSDEEP

3072:poqu/2Vhr+2B0hQf4tPzr7V+xIcHcirhq:y/4s2EtPPhcHcd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
03824e759f241d4c7addfe70a16d7057_JaffaCakes118

Files

03824e759f241d4c7addfe70a16d7057_JaffaCakes118
.exe windows:4 windows x86 arch:x86

fbc61d1fceef46bb40bd029f807e2385

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

memcpy
log10
memmove

kernel32

GetModuleHandleA
GetVersion
GetFullPathNameA
SetEvent
GetThreadLocale
WaitForSingleObject
GetFileSize
CloseHandle
ReadFile
SetEndOfFile
FindClose
LoadLibraryExA
lstrlenA
GetCurrentThread
GetCommandLineA
EnterCriticalSection
GetStringTypeA
InitializeCriticalSection
Sleep
GetEnvironmentStrings
SetLastError
lstrcmpA
FreeResource
GetCurrentThreadId
MulDiv
CreateThread
SizeofResource
HeapAlloc
GetTickCount
lstrcpynA
LocalAlloc
CreateFileA
GetLocalTime
LocalFree
GetDiskFreeSpaceA
GlobalDeleteAtom
GetFileType
GetProcAddress
GetStringTypeW
GetStartupInfoA
GetLocaleInfoA
LockResource
GetUserDefaultLCID
GetProcessHeap
VirtualAlloc
GetCPInfo
WideCharToMultiByte
ExitThread
MoveFileExA
EnumCalendarInfoA
CompareStringA
CreateEventA
FreeLibrary
HeapFree
SetErrorMode
GetDateFormatA
SetHandleCount
VirtualQuery
LoadLibraryA
GetCurrentProcessId
lstrcatA

user32

GetClientRect
SetTimer
IsMenu
GetKeyNameTextA
GetForegroundWindow
EndPaint
BeginPaint
GetCursorPos
GetWindow
CreatePopupMenu
DrawTextA
CreateIcon
EnableMenuItem
FindWindowA
DeferWindowPos
EnumThreadWindows
DispatchMessageW
SetCursor
GetFocus
GetIconInfo
GetScrollPos
GetDCEx
GetSysColor
GetDC
GetMenuStringA
CharToOemA
EnumChildWindows
SetWindowPos
DrawIcon
IsDialogMessageA
GetActiveWindow
IsWindowEnabled
SetWindowTextA
GetMessagePos
CallWindowProcA
MessageBoxA
GetWindowTextA
EqualRect
CharNextA
GetDesktopWindow
CallNextHookEx
FrameRect
GetDlgItem
DrawEdge
GetCapture
FillRect
HideCaret
DrawMenuBar
DefFrameProcA
GetMenu
GetKeyState
IsChild
ShowWindow
DrawIconEx
DefWindowProcA
SystemParametersInfoA
EnumWindows
ClientToScreen
GetMenuState
GetSysColorBrush
GetClassLongA
RegisterClassA
GetSubMenu
EnableScrollBar

version

GetFileVersionInfoA

Sections

.text
Size: 43KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: 58KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

DATA
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 1024B - Virtual size: 895B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fbc61d1fceef46bb40bd029f807e2385

Headers

File Characteristics

Imports

msvcrt

kernel32

user32

version

Sections

.text Size: 43KB - Virtual size: 42KB

.idata Size: 3KB - Virtual size: 3KB

BSS Size: 58KB - Virtual size: 57KB

DATA Size: 1KB - Virtual size: 1KB

.edata Size: 1024B - Virtual size: 895B

.text
Size: 43KB - Virtual size: 42KB

.idata
Size: 3KB - Virtual size: 3KB

BSS
Size: 58KB - Virtual size: 57KB

DATA
Size: 1KB - Virtual size: 1KB

.edata
Size: 1024B - Virtual size: 895B