08fa801ed6b4aed753492cc73a098f39_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

08fa801ed6b4aed753492cc73a098f39_JaffaCakes118
Size

116KB
MD5

08fa801ed6b4aed753492cc73a098f39
SHA1

000deaedb9b69e6fdf24612d17d51e698c5dcf3e
SHA256

b8ad454af678ffda76913c57bcb3bdbffd19d8e0a8502e13519818dcac37fecd
SHA512

a0e5e44d7d5f71b281acadef1c2928b733e9a15c128ea8f757bed429883e82a2588d7b3bf8b341fdacf62bfe5cf9d2d5e898326fd5b46db9db1e3ab6a7148490
SSDEEP

1536:rDGyrWzOwoyin/E3ogHHY92UNcZhbw/j01hQvxkxPuQFCPAuz2pCvpwGwx:rE6n/V2HYvKZhAcuxkFu9D2YRwb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
08fa801ed6b4aed753492cc73a098f39_JaffaCakes118

Files

08fa801ed6b4aed753492cc73a098f39_JaffaCakes118
.exe windows:4 windows x86 arch:x86

11a81e9e1d0fc7c80d9da601174f4dc0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

memmove
cos
calloc

ole32

MkParseDisplayName
CoUnmarshalInterface
GetHGlobalFromStream
CLSIDFromString
OleRun
CoDisconnectObject

kernel32

GetSystemDefaultLangID
EnterCriticalSection
ResetEvent
GetCurrentThread
lstrcatA
GetLocaleInfoA
GetUserDefaultLCID
WideCharToMultiByte
VirtualFree
SetThreadLocale
CreateFileA
SetEvent
VirtualAllocEx
FreeResource
VirtualQuery
GetTickCount
GetCurrentThreadId
SetFilePointer
CreateEventA
GetLocalTime
SetLastError
GetProcessHeap
GetModuleHandleA
GetModuleFileNameA
GetVersion
FormatMessageA
GetThreadLocale
HeapAlloc
GetDiskFreeSpaceA
WaitForSingleObject
GetFileSize
LoadResource
GetStringTypeA
DeleteCriticalSection
EnumCalendarInfoA
FindClose
FreeLibrary
HeapDestroy
ExitThread
CompareStringA
GetStringTypeW
GetStdHandle
LoadLibraryA
DeleteFileA
GetOEMCP
lstrlenA
CreateThread
ReadFile
HeapFree
FindFirstFileA
GetLastError
SetHandleCount
GlobalAlloc
GetFullPathNameA
MoveFileExA
lstrcpyA
VirtualAlloc
ExitProcess
SetErrorMode
lstrcmpiA
lstrcpynA
LocalReAlloc
CloseHandle
GlobalDeleteAtom
GetEnvironmentStrings
Sleep
SizeofResource
InitializeCriticalSection
GetACP
GetFileAttributesA
GetCommandLineA
WriteFile
LockResource
GlobalAddAtomA
LocalFree
LocalAlloc
GetFileType
LoadLibraryExA
GetStartupInfoA
RaiseException
GlobalFindAtomA
GetCurrentProcessId
GetDateFormatA
GetVersionExA

comctl32

ImageList_Add
ImageList_Remove
ImageList_Destroy
ImageList_DrawEx

user32

GetMenuItemInfoA
SetTimer
TrackPopupMenu
SetParent
EndPaint
SetWindowsHookExA
SetClipboardData
GetWindowTextA
KillTimer
LoadKeyboardLayoutA
MessageBeep
GetScrollInfo
GetActiveWindow
RegisterWindowMessageA
GetClassInfoA
CreatePopupMenu
DrawIconEx
SetWindowLongA
OpenClipboard
FindWindowA
IntersectRect
DrawEdge
GetMenu
WindowFromPoint
GetWindowDC
GetDCEx
InsertMenuItemA
GetIconInfo
DrawMenuBar
GetSystemMenu
SetWindowPlacement
RemovePropA
GetPropA
EnumChildWindows
UnregisterClassA
GetLastActivePopup
GetWindow
EnableMenuItem
CreateWindowExA
GetDesktopWindow
SetScrollPos
CallWindowProcA
DrawTextA
ReleaseDC
GetTopWindow
SetCapture
DefFrameProcA
IsWindowVisible
InsertMenuA
BeginPaint
GetMenuItemID
SetMenuItemInfoA
DrawIcon
GetWindowRect
DestroyCursor
IsWindowUnicode
SetPropA
EnumWindows
DrawAnimatedRects
RemoveMenu
GetKeyboardType
MapVirtualKeyA
GetScrollPos
GetMenuState
EnumThreadWindows
SetClassLongA
PeekMessageW
GetClipboardData
OemToCharA
GetKeyboardState
CharToOemA
EnableScrollBar
GetFocus
SystemParametersInfoA
MapWindowPoints
ShowWindow
PostMessageA
GetSysColor
LoadCursorA
MoveWindow
RegisterClassA
GetClassNameA
FrameRect
ReleaseCapture
GetCursor
RegisterClipboardFormatA
ClientToScreen
GetCapture
SetActiveWindow
MsgWaitForMultipleObjects
CharUpperBuffA
DispatchMessageA
RedrawWindow
CheckMenuItem
CharNextA
GetKeyboardLayoutNameA
SetScrollInfo
CreateIcon
UnhookWindowsHookEx
SetWindowTextA
DrawFrameControl
ShowScrollBar
InvalidateRect
IsWindow
MessageBoxA
OffsetRect
IsChild
SetMenu
SendMessageA
DispatchMessageW
EqualRect
SetWindowLongW
GetClassLongA
GetWindowThreadProcessId
GetScrollRange
GetWindowLongA
SetFocus
ChildWindowFromPoint
InflateRect
CharNextW
LoadBitmapA
GetKeyboardLayout
CloseClipboard
GetDC
LoadIconA
GetSysColorBrush
GetSystemMetrics
IsIconic
GetDlgItem
ScrollWindow
GetMenuItemCount
AdjustWindowRectEx
GetParent
GetKeyboardLayoutList
SetWindowPos
GetWindowPlacement
DefWindowProcA
DefMDIChildProcA
DestroyIcon
wsprintfA
IsZoomed
GetMessagePos
GetClientRect
PtInRect
GetForegroundWindow
LoadStringA
DestroyWindow
GetMenuStringA
CharLowerBuffA
FillRect
UpdateWindow
WaitMessage
ScreenToClient
GetWindowLongW
TranslateMessage
GetCursorPos
ShowOwnedPopups
SetRect
DestroyMenu
IsWindowEnabled
CharLowerA
TranslateMDISysAccel
GetSubMenu
SetCursor
ActivateKeyboardLayout
DeleteMenu
SetScrollRange
PostQuitMessage
EmptyClipboard
GetKeyState
IsRectEmpty
EnableWindow
CallNextHookEx
SetForegroundWindow
PeekMessageA
SendMessageW
IsDialogMessageW
GetKeyNameTextA

Sections

.text
Size: 104KB - Virtual size: 103KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.init
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

11a81e9e1d0fc7c80d9da601174f4dc0

Headers

File Characteristics

Imports

msvcrt

ole32

kernel32

comctl32

user32

Sections

.text Size: 104KB - Virtual size: 103KB

.bss Size: 7KB - Virtual size: 7KB

.init Size: 4KB - Virtual size: 3KB

.text
Size: 104KB - Virtual size: 103KB

.bss
Size: 7KB - Virtual size: 7KB

.init
Size: 4KB - Virtual size: 3KB