0c6eddd77c91624aa9ac022459783fc6_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

0c6eddd77c91624aa9ac022459783fc6_JaffaCakes118
Size

216KB
MD5

0c6eddd77c91624aa9ac022459783fc6
SHA1

1deb483cae0f781c7d5852d023afc61be94ac95d
SHA256

d37fbeb0809a0c126c8bdb9d61a99ee87bcf503262a34725f3b4e87dbe17a652
SHA512

5a86612e2b6216ff52df1a040efd63abb724c6d92c8eb7be44618dcbcb9406d143f34794b45eaf926aac8ef3bc79df4e4be407eaa8b920b8acf1161aff871fba
SSDEEP

3072:T9KXnDG4qoqXTfso1jXdsb7ruwGMQxObtI8ICStZ9qyqMJ09h/olLshaANcHcFxF:mnD9qjnBNsb7vGMQxoI8QtZ9zJe/pDg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0c6eddd77c91624aa9ac022459783fc6_JaffaCakes118

Files

0c6eddd77c91624aa9ac022459783fc6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

acde5b9849abd9526a4372c6908e42b0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

SHGetDiskFreeSpaceA
SHGetFolderPathA
SHFileOperationA

comdlg32

GetFileTitleA
GetOpenFileNameA
FindTextA

version

GetFileVersionInfoA
VerQueryValueA

oleaut32

SafeArrayGetElement
SysAllocStringLen
SysStringLen
OleLoadPicture
GetErrorInfo
SysFreeString
RegisterTypeLib
SafeArrayUnaccessData
VariantCopyInd

ole32

StgCreateDocfileOnILockBytes
GetHGlobalFromStream
CoGetObjectContext
OleRegGetUserType
StringFromIID

msvcrt

wcschr
tolower

kernel32

VirtualAlloc
LoadLibraryExA
lstrlenW
GlobalDeleteAtom
GetTickCount
LockResource
LoadResource
LocalAlloc
RaiseException
GetProcessHeap
GlobalAlloc
GlobalAddAtomA
GetOEMCP
GetSystemDefaultLangID
LoadLibraryA
VirtualAllocEx
GetModuleFileNameA
GetLocaleInfoA
GlobalFindAtomA
GetStringTypeW
ExitProcess
GetStdHandle
GetLastError
GetUserDefaultLCID
HeapAlloc
ExitThread
GetProcAddress
GetThreadLocale
IsBadReadPtr
GetVersionExA
GetStringTypeA
GetVersion
GetLocalTime
HeapFree
InitializeCriticalSection
GetStartupInfoA
GetCommandLineW
GetModuleHandleA

gdi32

CreateCompatibleDC
GetRgnBox
CreateBrushIndirect
GetBitmapBits
CreateDIBitmap
GetDIBits
CreatePenIndirect
GetObjectA
GetCurrentPositionEx
GetClipBox
SetBkMode
GetPixel
CreateFontIndirectA
CreateCompatibleBitmap
SelectObject
SaveDC
CreateBitmap
LineTo
GetPaletteEntries
BitBlt
CreatePalette
GetDCOrgEx
CopyEnhMetaFileA
SelectPalette
SetBkColor
SetPixel
SetTextColor
GetDIBColorTable
RestoreDC
CreateDIBSection

shlwapi

SHSetValueA
SHDeleteKeyA
SHStrDupA
SHQueryValueExA
SHDeleteValueA
PathIsDirectoryA
PathGetCharTypeA

user32

GetForegroundWindow
DrawTextA
GetClipboardData
GetClientRect
EqualRect
GetClassInfoA
GetDC
GetFocus
GetActiveWindow
GetDlgItem
EnumThreadWindows
GetDesktopWindow
EnumChildWindows
GetCursorPos
DrawMenuBar
FillRect
GetClassNameA
GetCapture
FrameRect
EnableMenuItem
GetClassLongA
EndPaint
EnumWindows
FindWindowA
GetDCEx
GetCursor
DrawIconEx
EnableScrollBar
EmptyClipboard
EnableWindow

advapi32

RegDeleteKeyA
RegEnumValueA
RegQueryValueExA
RegOpenKeyExA

Sections

.text
Size: 65KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 627B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc2
Size: 1024B - Virtual size: 901B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc5
Size: 1024B - Virtual size: 542B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc1
Size: 141KB - Virtual size: 141KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc8
Size: 512B - Virtual size: 212B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc6
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 984B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

acde5b9849abd9526a4372c6908e42b0

Headers

File Characteristics

Imports

shell32

comdlg32

version

oleaut32

ole32

msvcrt

kernel32

gdi32

shlwapi

user32

advapi32

Sections

.text Size: 65KB - Virtual size: 64KB

.data Size: 1024B - Virtual size: 627B

.rsrc2 Size: 1024B - Virtual size: 901B

.rsrc5 Size: 1024B - Virtual size: 542B

.rsrc1 Size: 141KB - Virtual size: 141KB

.rsrc8 Size: 512B - Virtual size: 212B

.rsrc6 Size: 4KB - Virtual size: 4KB

.rsrc Size: 1024B - Virtual size: 984B

.text
Size: 65KB - Virtual size: 64KB

.data
Size: 1024B - Virtual size: 627B

.rsrc2
Size: 1024B - Virtual size: 901B

.rsrc5
Size: 1024B - Virtual size: 542B

.rsrc1
Size: 141KB - Virtual size: 141KB

.rsrc8
Size: 512B - Virtual size: 212B

.rsrc6
Size: 4KB - Virtual size: 4KB

.rsrc
Size: 1024B - Virtual size: 984B