ff94afe070de2c332463df440df909e5_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

ff94afe070de2c332463df440df909e5_JaffaCakes118
Size

164KB
MD5

ff94afe070de2c332463df440df909e5
SHA1

654e3a86519d0f555709a65c8019416a0564bb4a
SHA256

2ea74d4af99f08fbd932fbfe1c746b4bd284ffa821e3f23a8d3d9b8d982a96ff
SHA512

13cb929ae186b4090f4c7cdf4784a3ae00e65f6a5090c935c2621d77dac19b82ce967ab439c55d3d8e44af7067e2fc5ddc0357f69f2bf754c86c531ac3557710
SSDEEP

3072:ywCnEuYcFXr0YkppwwXrjRke2ahOJUPjUk6s0aLHdQTavfBUiN+:AccBDkpiQree2sOJugedWjiN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ff94afe070de2c332463df440df909e5_JaffaCakes118

Files

ff94afe070de2c332463df440df909e5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

05f0ba24c27917a181c1ad43428281a0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

WriteFile
GetProcAddress
GetModuleHandleA
GetVDMCurrentDirectories
GetCurrentProcessId
LoadLibraryW
SetThreadPriorityBoost
OutputDebugStringW
MultiByteToWideChar
ReadFile
FindFirstFileW
ExitProcess
EnumResourceNamesW
MoveFileW
CreateFileA
HeapAlloc
CreateProcessW
WideCharToMultiByte
GetUserDefaultUILanguage
FindClose
FreeLibrary
SetUnhandledExceptionFilter
GetLocalTime
DeleteFileW
SetFilePointer
HeapFree

msvfw32

ICInfo

gdi32

CreateDCW
SetBkColor
CreateCompatibleDC
SetTextColor
CreatePen
ExtCreateRegion
CreateFontW
CombineRgn
DeleteDC
CreateSolidBrush
SelectObject
DeleteObject
CreateDIBSection
SetViewportExtEx
GetCharWidthW
GetObjectW
MoveToEx
GetTextMetricsW
CreateCompatibleBitmap
SetBkMode
BitBlt
SetViewportOrgEx
StretchBlt
GetDeviceCaps
LineTo
CreatePatternBrush
GetStockObject

comdlg32

GetSaveFileNameW

user32

GetSysColor
MessageBoxW
SetRect
GetWindowRect
SetWindowTextW
GetWindowInfo
GetMenuStringW
SetWindowsHookExW
MoveWindow
AdjustWindowRect
EndDialog
GetWindowLongW
GetDlgItem
SendMessageW

shell32

ShellExecuteW

advapi32

RegEnumKeyW
RegQueryValueExW
RegCreateKeyExW
RegOpenKeyExW
RegQueryInfoKeyW
RegCloseKey
RegSetValueExW
RegDeleteKeyA

comctl32

ImageList_Create
ImageList_Draw
ImageList_ReplaceIcon
ImageList_Destroy

Sections

.text
Size: 103KB - Virtual size: 103KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idive
Size: 1024B - Virtual size: 244KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

05f0ba24c27917a181c1ad43428281a0

Headers

File Characteristics

Imports

kernel32

msvfw32

gdi32

comdlg32

user32

shell32

advapi32

comctl32

Sections

.text Size: 103KB - Virtual size: 103KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 56KB - Virtual size: 56KB

.idive Size: 1024B - Virtual size: 244KB

.text
Size: 103KB - Virtual size: 103KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 56KB - Virtual size: 56KB

.idive
Size: 1024B - Virtual size: 244KB