0d5855bf2277a44c0d9d60303788d662_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

0d5855bf2277a44c0d9d60303788d662_JaffaCakes118
Size

177KB
MD5

0d5855bf2277a44c0d9d60303788d662
SHA1

50f66471f411ada3092d1e1c68ed324b20ad362e
SHA256

d94afb929418b7c7ea3b1c8d46fc9e6469354a5e04fcb6a012aab5524d66d497
SHA512

1efd9db798a50a109bf4ab8cc9ad7193a5e4f6fc72941fb4bc5a1e531fe9ab4b33cd3f1f404cc2d09b36169b1a47ef6be8df623198f8df8eeab3601f42a928bb
SSDEEP

3072:Jn8W8l6l122+4afU0LKo357S1kYdopjTWSusJ+1DgC6QcZayTGsy+lfRA:dN86iF88LRnYGpvWSl81Ddvya+l5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0d5855bf2277a44c0d9d60303788d662_JaffaCakes118

Files

0d5855bf2277a44c0d9d60303788d662_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a39298c5999952303fbb61010382587b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

ImageList_Create
ImageList_Read
ImageList_Add
ImageList_DrawEx

version

GetFileVersionInfoSizeA

advapi32

RegCreateKeyA

msvcrt

sin
calloc
strlen
asin
malloc
acos
sqrt
abs
time

user32

CallNextHookEx
AdjustWindowRectEx
BeginPaint

shlwapi

SHDeleteValueA
SHDeleteKeyA

kernel32

lstrlenA
SetEvent
VirtualAlloc
IsBadReadPtr
GetProcAddress
ExitThread
IsBadHugeReadPtr
SetLastError
GetCommandLineW
LoadLibraryA
LoadLibraryExA
MoveFileExA
lstrlenW
Sleep
GetLastError
GetCommandLineA
GetModuleHandleA
HeapAlloc
lstrcpyA
GlobalAlloc
GetDiskFreeSpaceA
VirtualAllocEx
GlobalFindAtomA
GetFileSize
InitializeCriticalSection
GetFileType
ReadFile
EnumCalendarInfoA
GetModuleHandleW
CloseHandle
WriteFile
ExitProcess

shell32

Shell_NotifyIconA

gdi32

CopyEnhMetaFileA
CreateDIBSection
SelectPalette
CreatePalette
GetCurrentPositionEx
CreateCompatibleDC
GetBitmapBits
SetPixel
CreateDIBitmap

Sections

CODE
Size: 43KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bdata
Size: 1024B - Virtual size: 858B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: 117KB - Virtual size: 117KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.fdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 884B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a39298c5999952303fbb61010382587b

Headers

File Characteristics

Imports

comctl32

version

advapi32

msvcrt

user32

shlwapi

kernel32

shell32

gdi32

Sections

CODE Size: 43KB - Virtual size: 43KB

.rdata Size: 3KB - Virtual size: 51KB

.data Size: 7KB - Virtual size: 7KB

.bdata Size: 1024B - Virtual size: 858B

.adata Size: 117KB - Virtual size: 117KB

.fdata Size: 2KB - Virtual size: 1KB

.rsrc Size: 1024B - Virtual size: 884B

CODE
Size: 43KB - Virtual size: 43KB

.rdata
Size: 3KB - Virtual size: 51KB

.data
Size: 7KB - Virtual size: 7KB

.bdata
Size: 1024B - Virtual size: 858B

.adata
Size: 117KB - Virtual size: 117KB

.fdata
Size: 2KB - Virtual size: 1KB

.rsrc
Size: 1024B - Virtual size: 884B