0daa7aa2efb5c2a7bf568e5ca2e52906_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

0daa7aa2efb5c2a7bf568e5ca2e52906_JaffaCakes118
Size

199KB
MD5

0daa7aa2efb5c2a7bf568e5ca2e52906
SHA1

00d40f9461a8ad7b842f48f789bca05e4117168d
SHA256

d55b8edab613912cda0083d511ce8a1193a2ff35c00db19a689f29796184e745
SHA512

4ad26fa803d18371bb92e9e54b766cc1011c7171e16d4ca17bdb796058476320202825fafb2d160a11894a5a6e7910ecd1a7b0b5803e8682412b020b08f95345
SSDEEP

3072:D+CWCOvZyol2dVZZ7sHQLUzc9hCCdbJrWVga:rcvICIZZgHQLL9hCCf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0daa7aa2efb5c2a7bf568e5ca2e52906_JaffaCakes118

Files

0daa7aa2efb5c2a7bf568e5ca2e52906_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e9c5b4718337d388a7a1641018adc992

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

SetPixel
CreateDIBSection
GetDCOrgEx
SaveDC
GetRgnBox
CreateCompatibleDC
GetObjectA
RestoreDC
GetDIBits

comdlg32

FindTextA
GetOpenFileNameA
GetSaveFileNameA
ChooseColorA
GetOpenFileNameA
GetFileTitleA
ChooseColorA
GetSaveFileNameA

version

VerQueryValueA
VerFindFileA
VerFindFileA
VerQueryValueA
VerInstallFileA
VerFindFileA
VerQueryValueA

kernel32

LoadLibraryA
IsBadReadPtr
LocalAlloc
ExitProcess
GetModuleHandleA
GetVersionExA
GetLastError
LoadLibraryExA
IsBadHugeReadPtr
ExitThread
GetProcAddress
VirtualAlloc
Sleep

user32

CharLowerA
GetKeyboardState

shlwapi

PathFileExistsA
SHSetValueA
SHQueryValueExA
SHQueryInfoKeyA

ole32

CoCreateFreeThreadedMarshaler

msvcrt

strcmp
mbstowcs
clock
_acmdln
fabs
malloc
exp
log10
memcmp

oleaut32

SysFreeString
VariantChangeType
SafeArrayPtrOfIndex
SafeArrayCreate

shell32

SHGetSpecialFolderLocation
SHGetFolderPathA

advapi32

RegCreateKeyExA
RegOpenKeyA

comctl32

ImageList_Read
ImageList_Write

Sections

.text
Size: 56KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 857B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.DATA9
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.DATA4
Size: 118KB - Virtual size: 118KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.DATA0
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.DATA7
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e9c5b4718337d388a7a1641018adc992

Headers

File Characteristics

Imports

gdi32

comdlg32

version

kernel32

user32

shlwapi

ole32

msvcrt

oleaut32

shell32

advapi32

comctl32

Sections

.text Size: 56KB - Virtual size: 55KB

.data Size: 1024B - Virtual size: 857B

.DATA9 Size: 2KB - Virtual size: 1KB

.DATA4 Size: 118KB - Virtual size: 118KB

.DATA0 Size: 16KB - Virtual size: 15KB

.DATA7 Size: 3KB - Virtual size: 3KB

.rsrc Size: 1KB - Virtual size: 1KB

.text
Size: 56KB - Virtual size: 55KB

.data
Size: 1024B - Virtual size: 857B

.DATA9
Size: 2KB - Virtual size: 1KB

.DATA4
Size: 118KB - Virtual size: 118KB

.DATA0
Size: 16KB - Virtual size: 15KB

.DATA7
Size: 3KB - Virtual size: 3KB

.rsrc
Size: 1KB - Virtual size: 1KB