0e2421925e0b706a4d6750c65ac6dd68_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

0e2421925e0b706a4d6750c65ac6dd68_JaffaCakes118
Size

71KB
MD5

0e2421925e0b706a4d6750c65ac6dd68
SHA1

c27dc32aedbbb47cad364b2f31876eec94263efc
SHA256

1dcf24bd2d1c4d79058d65c5069b016e65556d2317931d750c9e29b0106603f7
SHA512

fab432e7f59880d35c1661f49808714c2e86d9b433c7b4f135cdb7955e4b4fd44343e2e72c1324ee96fb63aa3362fb6811f774e830b7534131b85d5c1126468a
SSDEEP

1536:AlqTen/QJ97NoqKTKbmVDTaWKkX1HPn9RngXhCN1U0I/c6/a:ADn/QJ97NGaWvlHnn+h61tI/g

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0e2421925e0b706a4d6750c65ac6dd68_JaffaCakes118

Files

0e2421925e0b706a4d6750c65ac6dd68_JaffaCakes118
.exe windows:5 windows x86 arch:x86

fc33a1bb432f10f2eb2712fe3ec96724

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetDC
CheckRadioButton
CharLowerA
GetClientRect
IsMenu
GetSystemMenu
ShowWindow
ChangeMenuA
GetDlgItem
CalcMenuBar
SendDlgItemMessageA
GetMessagePos
SetWindowTextW
GetWindowLongA
GetWindowTextA
GetPropA
SetMenu
GetSysColorBrush
MoveWindow
UnhookWindowsHookEx
IsChild
IsIconic

advapi32

IsValidAcl
ReportEventW
SetSecurityDescriptorGroup
RegEnumValueA
GetTokenInformation
RegEnumKeyExA
RegDeleteValueA
RegOpenKeyW
OpenThreadToken
GetLengthSid
GetSecurityDescriptorDacl
RegDeleteKeyW
GetSidSubAuthorityCount
MakeSelfRelativeSD
InitializeAcl
RegOpenKeyA
CheckTokenMembership
GetUserNameA
SetSecurityDescriptorOwner

kernel32

VirtualAlloc
FormatMessageW
GetStdHandle
FreeLibrary
ExitProcess
LoadLibraryW
HeapFree
IsDBCSLeadByte
GetCurrentProcessId
GetCurrentThreadId
GlobalAlloc
MultiByteToWideChar
lstrcmpA

msvcrt

_ltow
__p__fmode
towupper
_wcsnicmp
_adjust_fdiv
__set_app_type
bsearch
__p__commode
__setusermatherr
wcsncpy
wcsspn
fseek
strncmp
_acmdln
_snwprintf
realloc
__CxxFrameHandler
wcsrchr

ole32

OleRegEnumVerbs
OleUninitialize
StringFromGUID2
WriteClassStm
CreateILockBytesOnHGlobal
OleInitialize
CreateStreamOnHGlobal
PropVariantCopy
OleRegGetMiscStatus
CreateBindCtx

Sections

.text
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 15KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 1004B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fc33a1bb432f10f2eb2712fe3ec96724

Headers

File Characteristics

Imports

user32

advapi32

kernel32

msvcrt

ole32

Sections

.text Size: 15KB - Virtual size: 15KB

.rdata Size: 21KB - Virtual size: 20KB

.data Size: 15KB - Virtual size: 76KB

.idata Size: 17KB - Virtual size: 17KB

.reloc Size: 1024B - Virtual size: 1004B

.text
Size: 15KB - Virtual size: 15KB

.rdata
Size: 21KB - Virtual size: 20KB

.data
Size: 15KB - Virtual size: 76KB

.idata
Size: 17KB - Virtual size: 17KB

.reloc
Size: 1024B - Virtual size: 1004B