097237e559b161f8adecf14fae6d2888_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

097237e559b161f8adecf14fae6d2888_JaffaCakes118
Size

355KB
MD5

097237e559b161f8adecf14fae6d2888
SHA1

cd2290b95e4d4b4293f20e0a14c37d00a47c73d1
SHA256

edf73967bb75140cecb446d57fcb61134623ba816d5203dc05c1256903e9b766
SHA512

078ecc44d85a70645573295bcf75948fae81b8b9461341c484c0dfc58286b39aed79e66ebc636470ca45081f077a59f205957cfc8a6e2a4e5ef0d6f5bd77bdc8
SSDEEP

6144:GKeVYY3Z4fLdL0rvRTLFFPn8qXmvhz0B4ABqrZLGZHs3qw1GCEyn5:GKeVR3Z4fLdorjRnXXiaHANLiHs3qw1T

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
097237e559b161f8adecf14fae6d2888_JaffaCakes118

Files

097237e559b161f8adecf14fae6d2888_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e7486454129252b32a59ea90cb57db41

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

user32

CheckMenuItem
DrawTextA
SetWindowPlacement
DrawMenuBar
PostQuitMessage
EqualRect
GetWindowDC
CallWindowProcA
SetMenu
SetTimer
SetScrollInfo
InvalidateRect
GetScrollRange
GetKeyboardLayoutList
EnumWindows
FrameRect
MessageBeep
GetWindowRect
LoadCursorA
GetWindowLongW
ShowOwnedPopups
CreateIcon
RegisterClipboardFormatA
GetPropA
GetKeyNameTextA
DefMDIChildProcA
IsRectEmpty
GetDlgItem
PeekMessageA
WaitMessage
UnregisterClassA
SetRect
SetScrollPos
ShowScrollBar
EnableWindow
FindWindowA
GetMenuItemCount
MapWindowPoints
GetKeyboardType
SetWindowLongA
GetSystemMenu
SendMessageA
GetCursorPos
IsWindowVisible
RemoveMenu
GetKeyboardLayout
IsZoomed
SetWindowPos
DestroyCursor
GetWindowTextA
InsertMenuItemA
SetCursor
CallNextHookEx
RemovePropA
GetMenuState
RedrawWindow
GetKeyboardState
SendMessageW
GetDesktopWindow
SetCapture
GetClassInfoA
IsDialogMessageW
InsertMenuA
ChildWindowFromPoint
GetLastActivePopup
SetWindowTextA
CharToOemA
PostMessageA
SystemParametersInfoA
EnumThreadWindows
GetSysColor

oleaut32

SafeArrayGetElement
RegisterTypeLib
GetErrorInfo
SysStringLen

shell32

DragQueryFileA

msvcrt

log10
memmove
wcsncmp

comctl32

ImageList_Create
ImageList_Read
ImageList_Add
ImageList_DragShowNolock

version

GetFileVersionInfoA
VerInstallFileA

gdi32

GetDIBColorTable
GetObjectA
GetDIBits

shlwapi

PathIsDirectoryA
SHStrDupA
SHQueryValueExA
PathIsContentTypeA
SHQueryInfoKeyA
SHDeleteKeyA

kernel32

GlobalAlloc
VirtualAlloc
GetModuleHandleA
ExitThread
GetCommandLineA
GetCommandLineW
GetVersionExA
GetProcAddress
ExitProcess
IsBadReadPtr
GetLastError
LoadLibraryA
VirtualAllocEx
lstrlenA

Sections

.text
Size: 57KB - Virtual size: 57KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 289KB - Virtual size: 288KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.RSRC9
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RSRC6
Size: 1024B - Virtual size: 691B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RSRC2
Size: 1024B - Virtual size: 959B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.RSRC8
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RSRC5
Size: 512B - Virtual size: 291B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.RSRC3
Size: 1024B - Virtual size: 751B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 992B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e7486454129252b32a59ea90cb57db41

Headers

File Characteristics

Imports

user32

oleaut32

shell32

msvcrt

comctl32

version

gdi32

shlwapi

kernel32

Sections

.text Size: 57KB - Virtual size: 57KB

DATA Size: 289KB - Virtual size: 288KB

.RSRC9 Size: 1KB - Virtual size: 1KB

.RSRC6 Size: 1024B - Virtual size: 691B

.RSRC2 Size: 1024B - Virtual size: 959B

.RSRC8 Size: 1KB - Virtual size: 1KB

.RSRC5 Size: 512B - Virtual size: 291B

.RSRC3 Size: 1024B - Virtual size: 751B

.rsrc Size: 1024B - Virtual size: 992B

.text
Size: 57KB - Virtual size: 57KB

DATA
Size: 289KB - Virtual size: 288KB

.RSRC9
Size: 1KB - Virtual size: 1KB

.RSRC6
Size: 1024B - Virtual size: 691B

.RSRC2
Size: 1024B - Virtual size: 959B

.RSRC8
Size: 1KB - Virtual size: 1KB

.RSRC5
Size: 512B - Virtual size: 291B

.RSRC3
Size: 1024B - Virtual size: 751B

.rsrc
Size: 1024B - Virtual size: 992B