047557699329c1b8318bb5ced53d7872_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

047557699329c1b8318bb5ced53d7872_JaffaCakes118
Size

176KB
MD5

047557699329c1b8318bb5ced53d7872
SHA1

fe1eac1186b80590665cd9c285167a2a17e839b3
SHA256

f72d4bf612846f90a36f03d152f9e958eb193cad7ec943bd5172dd19a465d9ab
SHA512

04864e2323a1dc4477e6cb5a0d633371aa4216ce0a986099dc70da8e2ccddc3745abefea00ef2669d728b6c64a04afc22c63ec91c128d21a8fffc44a9aa82499
SSDEEP

3072:rSE7jCzEHeMVacQiVaU2bmmJm8pMAUGdOy34qPnhOTyVFo7Dim:rSEXCQac4pMApdOyIvOU7v

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
047557699329c1b8318bb5ced53d7872_JaffaCakes118

Files

047557699329c1b8318bb5ced53d7872_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e38786fd9f5a1649e690a2fe1310d2ee

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

CoCreateInstance
CoUninitialize
OleInitialize
CoFreeUnusedLibraries
StringFromGUID2
OleUninitialize
CoInitialize

shell32

SHGetSpecialFolderLocation
SHGetDesktopFolder
DragQueryFileW
SHGetMalloc
SHGetPathFromIDListW
SHGetFileInfoW

advapi32

RegSetValueExW
RegEnumKeyExW
RegCloseKey
RegCreateKeyW
RegOpenKeyExW
RegSetValueW
RegDeleteKeyW

kernel32

GetACP
FindNextChangeNotification
GetDriveTypeW
CloseHandle
GlobalLock
lstrcpynW
WaitForMultipleObjectsEx
InterlockedIncrement
CreateEventW
ResetEvent
GetLastError
WideCharToMultiByte
WaitForSingleObject
DeleteCriticalSection
GetProcessId
GetVersionExW
GlobalUnlock
GlobalAlloc
lstrlenW
GetTickCount
MulDiv
GetSystemTimeAsFileTime
GetCurrentThreadId
QueryPerformanceCounter
FindFirstChangeNotificationW
MultiByteToWideChar
EnumResourceTypesW
GetModuleFileNameA
GetProcAddress
FreeLibrary
GlobalReAlloc
GetFullPathNameW
GetCurrentProcessId
lstrlenA
DisableThreadLibraryCalls
GetModuleHandleW
Sleep
LeaveCriticalSection
FindClose
InitializeCriticalSection
ExitProcess
SetEvent
FileTimeToSystemTime
GetLocaleInfoA
EnterCriticalSection
FindFirstFileW
CreateThread
GetThreadLocale
InterlockedExchange
InterlockedDecrement
FileTimeToLocalFileTime
FindCloseChangeNotification
GetVersionExA

user32

ReleaseDC
SetWindowLongW
DefWindowProcW
FrameRect
LoadImageW
GetActiveWindow
ReleaseCapture
GetWindowRect
TrackPopupMenuEx
GetSysColorBrush
FillRect
DestroyMenu
GetClientRect
PostMessageW
SetTimer
ScreenToClient
GetWindowLongW
GetParent
IntersectRect
GetDC
UnionRect
SetCursor
IsWindowVisible
IsRectEmpty
SendMessageW
ClientToScreen
SetFocus
SetCapture
LoadCursorW
wsprintfW
SetForegroundWindow
BringWindowToTop
SetRectEmpty
KillTimer
DrawFocusRect
PtInRect
GetDesktopWindow
EnableWindow
EqualRect
CreatePopupMenu
GetSystemMetrics
InflateRect
UpdateWindow
ShowScrollBar
IsWindow
CopyRect
SetRect
OffsetRect
FindWindowExW
DrawTextW
GetSysColor
GetCursorPos
InvalidateRect

avifil32

AVISaveOptions
AVIMakeCompressedStream

Sections

.text
Size: 101KB - Virtual size: 101KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: 69KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 1024B - Virtual size: 248KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e38786fd9f5a1649e690a2fe1310d2ee

Headers

File Characteristics

Imports

ole32

shell32

advapi32

kernel32

user32

avifil32

Sections

.text Size: 101KB - Virtual size: 101KB

.rdata Size: 3KB - Virtual size: 3KB

.bss Size: 69KB - Virtual size: 69KB

.tls Size: 1024B - Virtual size: 248KB

.text
Size: 101KB - Virtual size: 101KB

.rdata
Size: 3KB - Virtual size: 3KB

.bss
Size: 69KB - Virtual size: 69KB

.tls
Size: 1024B - Virtual size: 248KB