0b1ae98808c54c7155d685d414419a92_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

0b1ae98808c54c7155d685d414419a92_JaffaCakes118
Size

170KB
MD5

0b1ae98808c54c7155d685d414419a92
SHA1

04b1380e9287fc5d4b66aa07d36263e7c0c39972
SHA256

8168a4aea3529fc40bb8b44a604f8f2fb0afcb006f9bb94762c940cf48885aab
SHA512

a09f1e819cc7c38197f121ed9b3cbdcf57e842e02e907dd3e67192bb8c7975cbe899c046a2b537452e8876bcb62631eeaf754e1ee2f3dc9b33dd608f5c48dee1
SSDEEP

3072:3dXUZqly65XavJ3zVzpAjvUDWoRTE+7CJ7FMVfv7Yb8LGUSiZzf0:3+ZW+vtBpAwDHTE17Fwv7S8LGUjf0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0b1ae98808c54c7155d685d414419a92_JaffaCakes118

Files

0b1ae98808c54c7155d685d414419a92_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c3112a84a07d1064f4a77c4e50d77191

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

ShellExecuteA

kernel32

GetVersionExA
GetPrivateProfileSectionW
lstrcmpW
GetLastError
GetModuleHandleW
GetCurrentProcess
lstrcmpiW
GetModuleHandleW
FindNextFileW
FindFirstFileW
SetFileAttributesW

user32

SendDlgItemMessageW
IsDialogMessageW
SetWindowTextW
MoveWindow
GetWindowRect
GetWindowPlacement
SystemParametersInfoA
CallWindowProcW
DefWindowProcW
PtInRect
DeferWindowPos
ScreenToClient
RegisterClassW
GetClassInfoExW
CreateWindowExW
MessageBoxW
GetClientRect
SetForegroundWindow
TrackPopupMenu
MapWindowPoints
GetMessagePos
GetMessageTime
UnhookWindowsHookEx
DestroyWindow
GetTopWindow
EndDeferWindowPos
BeginDeferWindowPos
DispatchMessageW
GetForegroundWindow

gdi32

DeleteObject

advapi32

RegCreateKeyA
RegCloseKey
RegSetValueA
RegSetValueExA
RegOpenKeyExA
RegEnumKeyExA
RegDeleteKeyA

gdiplus

GdipDeleteGraphics
GdipAlloc
GdipFree
GdipDisposeImage
GdipGetImageWidth
GdipGetImageHeight
GdipGetImagePixelFormat
GdipGetImagePaletteSize
GdipGetImagePalette
GdipCreateBitmapFromFile
GdipCreateBitmapFromScan0
GdipBitmapLockBits
GdipCloneImage
GdipDrawImageI
GdipGetImageGraphicsContext
GdiplusShutdown
GdiplusStartup
GdipBitmapUnlockBits

ole32

CoFreeUnusedLibraries
CoSetProxyBlanket
CoDisconnectObject
CoTaskMemAlloc
CreateStreamOnHGlobal
StringFromGUID2
CoUninitialize
CoInitialize
CoCreateInstance
CoTaskMemFree

Sections

.text
Size: 113KB - Virtual size: 113KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 52KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 304B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c3112a84a07d1064f4a77c4e50d77191

Headers

File Characteristics

Imports

shell32

kernel32

user32

gdi32

advapi32

gdiplus

ole32

Sections

.text Size: 113KB - Virtual size: 113KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 52KB - Virtual size: 52KB

.reloc Size: 512B - Virtual size: 304B

.text
Size: 113KB - Virtual size: 113KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 52KB - Virtual size: 52KB

.reloc
Size: 512B - Virtual size: 304B