0ae5d57fdd82cfb29b6bea06eecfab85_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

0ae5d57fdd82cfb29b6bea06eecfab85_JaffaCakes118
Size

179KB
MD5

0ae5d57fdd82cfb29b6bea06eecfab85
SHA1

a56150805fece92040c31f02ee601be02c222f04
SHA256

ba763aff7d474963b86e55f031b81f37eb0c68fdc117cfb5f9c6b63b3c4f0bcc
SHA512

dcb411a1bc17efc19a61d9010649f2e38a350c2575ab04d6588aa8f63cbd7c9d83a075d7d3f1b40511aa5c7224ae8e91def3740d9b1c2908110460cb7c923870
SSDEEP

3072:wceffau5V/H1wCa9+45kCzwZAwpQ/Z6xQr9NtousB9J3eSppJ6CY0q:Mz1ta5DzwPpQ+Q3+h9JeSpp8tb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0ae5d57fdd82cfb29b6bea06eecfab85_JaffaCakes118

Files

0ae5d57fdd82cfb29b6bea06eecfab85_JaffaCakes118
.exe windows:4 windows x86 arch:x86

895f73667dc43524690bb5f6654aefc5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

CoTaskMemAlloc
CoCreateInstance
CoInitialize
StgCreateDocfileOnILockBytes
CoRetireServer
StgOpenStorageOnILockBytes
CoGetClassObject
CoRevokeClassObject
CoTaskMemFree
OleFlushClipboard
CoUninitialize
OleIsCurrentClipboard
CoRegisterMessageFilter
CoFreeUnusedLibraries
OleUninitialize
CLSIDFromProgID
CreateILockBytesOnHGlobal
OleInitialize
CLSIDFromString

kernel32

GetLocaleInfoW
EnumResourceLanguagesW
GetCalendarInfoW
GetCurrentProcessId
FindClose
SystemTimeToFileTime
ConvertDefaultLocale
WriteFile
LoadLibraryW
FindNextFileW
GetVersion
ReadFile
GetFileAttributesW
MoveFileW
GetModuleFileNameW
EnumResourceNamesA
lstrcpyW
CreateFileW
WideCharToMultiByte
FindFirstFileW
ExitProcess
SetFileTime
GetSystemDefaultLangID
InterlockedDecrement
SetFilePointer
DeleteFileW
MultiByteToWideChar
LocalFileTimeToFileTime
RemoveDirectoryW
CreateDirectoryW
GetCurrentDirectoryW
GetProcAddress

user32

CreateWindowExW
GetClassLongW
InvalidateRect
InvalidateRgn
IsRectEmpty
GetNextDlgGroupItem
WinHelpW
GetNextDlgTabItem
RemovePropW
SetRect
GetClassInfoExW
RegisterWindowMessageW
SendDlgItemMessageA
MessageBeep
CopyAcceleratorTableW
SetPropW
CharNextW
CharUpperW
GetPropW
DestroyMenu

advapi32

RegQueryValueW
RegEnumKeyExW
RegCloseKey
RegOpenKeyW
RegOpenKeyExW
RegSetValueExW
RegDeleteKeyW
RegQueryInfoKeyW
RegEnumKeyW
RegCreateKeyExW
RegQueryValueExW

shlwapi

PathFileExistsW
PathIsUNCW
PathRemoveFileSpecW
PathFindFileNameW
PathStripToRootW
PathFindExtensionW
PathAppendW

gdi32

SelectObject
GetMapMode
ScaleWindowExtEx
ExtSelectClipRgn
TextOutW
GetBkColor
SetWindowExtEx
GetTextColor
DeleteDC
GetDeviceCaps
SetViewportOrgEx
PtVisible
OffsetViewportOrgEx
GetStockObject
ExtTextOutW
RectVisible
ScaleViewportExtEx
Escape
GetRgnBox

shell32

SHCreateDirectoryExW
SHGetSpecialFolderPathW

oleacc

LresultFromObject
CreateStdAccessibleObject

Sections

.text
Size: 104KB - Virtual size: 103KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: 70KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 1024B - Virtual size: 248KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

895f73667dc43524690bb5f6654aefc5

Headers

File Characteristics

Imports

ole32

kernel32

user32

advapi32

shlwapi

gdi32

shell32

oleacc

Sections

.text Size: 104KB - Virtual size: 103KB

.rdata Size: 3KB - Virtual size: 3KB

.bss Size: 70KB - Virtual size: 69KB

.edata Size: 1024B - Virtual size: 248KB

.text
Size: 104KB - Virtual size: 103KB

.rdata
Size: 3KB - Virtual size: 3KB

.bss
Size: 70KB - Virtual size: 69KB

.edata
Size: 1024B - Virtual size: 248KB