01d19888350e3d7001c04390ba64e5a1_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

01d19888350e3d7001c04390ba64e5a1_JaffaCakes118
Size

216KB
MD5

01d19888350e3d7001c04390ba64e5a1
SHA1

5bfe2f0a6c66bae2a269cd3d843373fcbcd3b4e1
SHA256

cde323a2d856a8ea075886add09063c7d99be6f89983e9e11bd2f0cf9f3428c2
SHA512

a7d76da5965b93a6a3e6a7e9a90da2605f8d38fb8cdacd534c9b08f69e88ecd4221e5952bd3a3c01d112f055941bdb7297024ad4d40c36fb8147a9c7478cba91
SSDEEP

3072:2nQkSO7sPHS7+zENyikP8VRU7yZcy+4y+9hoL2pNF7PPW113YlMWpqcPSYlZpbNz:qp7GA+wNlVRUu0yy0DLU1s/pqoSA1sV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
01d19888350e3d7001c04390ba64e5a1_JaffaCakes118

Files

01d19888350e3d7001c04390ba64e5a1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e88ba0512c5cc14fcbaf0c216a1661f6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegCreateKeyExA
RegDeleteValueA
RegLoadKeyA

user32

MapWindowPoints
RedrawWindow
SendMessageA
ScrollWindow
PeekMessageA
RegisterWindowMessageA
LoadCursorA
LoadKeyboardLayoutA
OemToCharA
OpenClipboard
LoadBitmapA
PtInRect
RemoveMenu
OffsetRect
RegisterClassA
ScreenToClient
ReleaseDC
PeekMessageW
ReleaseCapture
RemovePropA
RegisterClipboardFormatA
SendMessageW
LoadStringA
MessageBoxA
MapVirtualKeyA
SetActiveWindow
PostQuitMessage
MessageBeep
LoadIconA
PostMessageA

gdi32

CreatePenIndirect
SetTextColor
GetBitmapBits
GetCurrentPositionEx
CreateFontIndirectA
CreatePalette
CreateDIBitmap

ole32

CoReleaseMarshalData
OleCreateStaticFromData

oleaut32

SysStringLen
RegisterTypeLib
SafeArrayCreate
VariantCopyInd
SafeArrayGetUBound

kernel32

LocalReAlloc
lstrcatA
lstrcmpA
lstrlenA
LoadLibraryA
GetCommandLineA
LocalAlloc
MoveFileExA
lstrcpynA
IsBadReadPtr
VirtualFree
GetLastError
ExitThread
lstrcmpiA
VirtualAlloc
GetVersionExA
GetModuleHandleA
WideCharToMultiByte
WriteFile
LocalFree
SizeofResource
WaitForSingleObject
HeapDestroy
ExitProcess
lstrcpyA
GetProcAddress
VirtualQuery
MoveFileA
MulDiv
LoadLibraryExA

shlwapi

SHStrDupA
PathGetCharTypeA
PathIsContentTypeA
SHGetValueA
SHSetValueA
PathFileExistsA

shell32

SHGetFileInfoA
SHGetSpecialFolderLocation
DragQueryFileA
Shell_NotifyIconA
SHGetFolderPathA

comctl32

ImageList_GetBkColor
ImageList_DragShowNolock
ImageList_Read
ImageList_Add
ImageList_Destroy
ImageList_Draw
ImageList_Write
ImageList_Create
ImageList_DrawEx
ImageList_Remove

msvcrt

strlen
sqrt
tolower
wcsncmp
_acmdln
wcstol
malloc
time

version

GetFileVersionInfoA
VerFindFileA

Sections

.text
Size: 74KB - Virtual size: 73KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc9
Size: 1024B - Virtual size: 654B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc2
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc8
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc4
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc0
Size: 129KB - Virtual size: 128KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 976B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e88ba0512c5cc14fcbaf0c216a1661f6

Headers

File Characteristics

Imports

advapi32

user32

gdi32

ole32

oleaut32

kernel32

shlwapi

shell32

comctl32

msvcrt

version

Sections

.text Size: 74KB - Virtual size: 73KB

.data Size: 1KB - Virtual size: 1KB

.rsrc9 Size: 1024B - Virtual size: 654B

.rsrc2 Size: 2KB - Virtual size: 1KB

.rsrc8 Size: 1KB - Virtual size: 1KB

.rsrc4 Size: 4KB - Virtual size: 4KB

.rsrc0 Size: 129KB - Virtual size: 128KB

.rsrc Size: 1024B - Virtual size: 976B

.text
Size: 74KB - Virtual size: 73KB

.data
Size: 1KB - Virtual size: 1KB

.rsrc9
Size: 1024B - Virtual size: 654B

.rsrc2
Size: 2KB - Virtual size: 1KB

.rsrc8
Size: 1KB - Virtual size: 1KB

.rsrc4
Size: 4KB - Virtual size: 4KB

.rsrc0
Size: 129KB - Virtual size: 128KB

.rsrc
Size: 1024B - Virtual size: 976B