0cf7a114476455d39d6245ff2abea826_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

0cf7a114476455d39d6245ff2abea826_JaffaCakes118
Size

175KB
MD5

0cf7a114476455d39d6245ff2abea826
SHA1

b24696e146532a6a6085dbcfb1f159b175013612
SHA256

d813cb932d3fea32f4dacae896335123a97e1d43fe45de71fd17f5dc4a30e3a9
SHA512

277a810cc9cba54301be1a84f56c0bc8990d536be7a985e1678a66887edaf7d5f2ae0836c099b0286f3ffa63b1fc5699794fd861daaee3bee4284d291d04f5b9
SSDEEP

3072:ce/+M9RtB+XuclMvyqAkIZDdZqgcMDfaI1Yf3tN7eeu96Y9djTyAWje+4g:XWSIXa3AkIZDdAgLa8Yf3/eetY3OAWCM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0cf7a114476455d39d6245ff2abea826_JaffaCakes118

Files

0cf7a114476455d39d6245ff2abea826_JaffaCakes118
.exe windows:4 windows x86 arch:x86

928ca65e2dd940df572da015f02d4b3e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

avifil32

AVISaveOptions
AVIMakeCompressedStream

user32

CreatePopupMenu
UpdateWindow
CopyRect
GetActiveWindow
GetDC
SetTimer
GetParent
DestroyMenu
SetWindowLongW
PostMessageW
GetDesktopWindow
IsRectEmpty
ClientToScreen
SetCapture
GetSysColorBrush
ReleaseDC
DrawFocusRect
ReleaseCapture
PtInRect
SetFocus
EnableWindow
GetCursorPos
GetClientRect
ShowScrollBar
FillRect
SendMessageW
SetRect
BringWindowToTop
SetCursor
GetSysColor
OffsetRect
ScreenToClient
UnionRect
DrawTextW
SetForegroundWindow
DefWindowProcW
IsWindowVisible
IntersectRect
FrameRect
GetSystemMetrics
GetWindowRect
LoadCursorW
GetWindowLongW
FindWindowExW
LoadImageW
SetRectEmpty
InflateRect
wsprintfW
EqualRect
KillTimer
TrackPopupMenuEx
IsWindow
InvalidateRect

shell32

SHGetDesktopFolder
SHGetSpecialFolderLocation
SHGetMalloc
SHGetPathFromIDListW
DragQueryFileW
SHGetFileInfoW

advapi32

RegCreateKeyW
RegSetValueExW
RegEnumKeyExW
RegCloseKey
RegOpenKeyExW
RegSetValueW
RegDeleteKeyW

kernel32

GetLastError
SetEvent
InterlockedDecrement
WaitForMultipleObjectsEx
FileTimeToLocalFileTime
GlobalReAlloc
GetSystemTimeAsFileTime
GetACP
GlobalAlloc
GetDriveTypeW
CreateEventW
InterlockedIncrement
EnterCriticalSection
Sleep
GetVersionExW
FindFirstFileW
WaitForSingleObject
GetThreadLocale
FindFirstChangeNotificationW
FindClose
GetProcessId
GetFullPathNameW
FileTimeToSystemTime
FindCloseChangeNotification
GetModuleHandleW
FreeLibrary
lstrlenW
MultiByteToWideChar
CreateThread
EnumResourceTypesW
lstrlenA
GetTickCount
LeaveCriticalSection
GlobalUnlock
ExitProcess
GetCurrentThreadId
ResetEvent
QueryPerformanceCounter
GetCurrentProcessId
lstrcpynW
GetProcAddress
InitializeCriticalSection
FindNextChangeNotification
CloseHandle
DisableThreadLibraryCalls
DeleteCriticalSection
InterlockedExchange
GlobalLock
WideCharToMultiByte
GetLocaleInfoA
MulDiv
GetModuleFileNameA
GetVersionExA

ole32

OleUninitialize
OleInitialize
CoFreeUnusedLibraries
StringFromGUID2
CoCreateInstance
CoUninitialize
CoInitialize

Sections

.text
Size: 99KB - Virtual size: 98KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: 71KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 1024B - Virtual size: 380KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

928ca65e2dd940df572da015f02d4b3e

Headers

File Characteristics

Imports

avifil32

user32

shell32

advapi32

kernel32

ole32

Sections

.text Size: 99KB - Virtual size: 98KB

.rdata Size: 3KB - Virtual size: 3KB

.bss Size: 71KB - Virtual size: 70KB

.tls Size: 1024B - Virtual size: 380KB

.text
Size: 99KB - Virtual size: 98KB

.rdata
Size: 3KB - Virtual size: 3KB

.bss
Size: 71KB - Virtual size: 70KB

.tls
Size: 1024B - Virtual size: 380KB