00fa94ed3e096a180a6582251763647c_JaffaCakes118

General

Target

00fa94ed3e096a180a6582251763647c_JaffaCakes118
Size

62KB
MD5

00fa94ed3e096a180a6582251763647c
SHA1

dc3a3b81ced86bf825ed0a830d4fea1d3b6ebbd9
SHA256

e1559699a71ecaa351bd2280095f7efa99b8e1b9b56e3c258c09580751ff5b85
SHA512

38e80709e2282f4eda901c3f04273fad3b5818b452781a02ad551db244eae984daef3b0ad4d3534c389e6228896b38eb73bfb606bb943705a16e5759d219cc27
SSDEEP

1536:mGPegsVpDKNSf+owoS9Po8TwYwMPtd/BqDIkp:RdCpKM+oGBbw6td/BWv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
00fa94ed3e096a180a6582251763647c_JaffaCakes118

Files

00fa94ed3e096a180a6582251763647c_JaffaCakes118
.exe windows:5 windows x86 arch:x86

3297f6daf3f7338bfe0a45be886ec9e0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetWindowTextA
FillRect
GetCapture
GetWindowLongA
GetMenuItemCount
GetWindowDC
ChangeMenuA
GetDC
GetClientRect
GetForegroundWindow
SetFocus
GetDlgCtrlID
GetWindow
CheckDlgButton
GetMessagePos
GetSysColorBrush
EndPaint
SetWindowLongW
GetActiveWindow
DragObject
GetParent

ole32

CoCreateInstance
GetHGlobalFromStream
OleSaveToStream
StringFromGUID2
CoSetProxyBlanket
StgCreateDocfileOnILockBytes
OleRegGetUserType
ProgIDFromCLSID
BindMoniker

kernel32

GetExitCodeThread
GetCurrentProcessId
lstrlenW
SetHandleCount
OpenMutexA
IsValidCodePage
ExitProcess
GetOEMCP
IsDBCSLeadByte
lstrcatW
DeleteFileA
GetLastError
VirtualAlloc
FindResourceA
DeleteFileW
GetFileAttributesA
OutputDebugStringA
GetCurrentThreadId
SetUnhandledExceptionFilter
GlobalLock
GetLocalTime

msvcrt

__p__osver
isalpha
wcsrchr
__p__iob
time
__p__commode
rand
_ltow
malloc
swprintf
qsort
__set_app_type
_finite
__setusermatherr
swscanf
wcsncmp
_rotl
srand
atoi
wcsncpy
__wgetmainargs
__p__fmode
_exit

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 26KB - Virtual size: 87KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 485B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3297f6daf3f7338bfe0a45be886ec9e0

Headers

File Characteristics

Imports

user32

ole32

kernel32

msvcrt

Sections

.text Size: 7KB - Virtual size: 7KB

.rdata Size: 27KB - Virtual size: 26KB

.data Size: 26KB - Virtual size: 87KB

.reloc Size: 512B - Virtual size: 485B

.text
Size: 7KB - Virtual size: 7KB

.rdata
Size: 27KB - Virtual size: 26KB

.data
Size: 26KB - Virtual size: 87KB

.reloc
Size: 512B - Virtual size: 485B