0e454fab3811f113079d7f9c4021479e_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

0e454fab3811f113079d7f9c4021479e_JaffaCakes118
Size

146KB
MD5

0e454fab3811f113079d7f9c4021479e
SHA1

56e0b6c786b03d382e1f29fbff871d593dfd3127
SHA256

b5707741868c75af61c071660b6f7dde1142b8c54ada552970079f37c726bce1
SHA512

0f1550b46fb077e86032e241d2bddfacc022f93206630d41702c6dd432c25c60eb67e9005ff09a30495d105a5a2d5729d07797bf063823e49721404dc512da7f
SSDEEP

3072:mXtKQRrOK4xXQ56U9sU+VC34PQg+ybqcB:mL/56U9s9C/g+yH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0e454fab3811f113079d7f9c4021479e_JaffaCakes118

Files

0e454fab3811f113079d7f9c4021479e_JaffaCakes118
.exe windows:5 windows x86 arch:x86

8ae74cf5b0e52f8704cac79b7955e656

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

StrCpyNW
PathUnquoteSpacesA
StrFromTimeIntervalA
PathCombineA
StrFormatKBSizeA

shell32

ord716

kernel32

LockFile
GetCommConfig
TlsSetValue
SetFileShortNameW
GetProfileStringW
GetStartupInfoA
ChangeTimerQueueTimer
QueryPerformanceCounter
FileTimeToDosDateTime
SetProcessWorkingSetSize
CreateDirectoryExW
SignalObjectAndWait
LoadLibraryExW
SetNamedPipeHandleState
CreateSemaphoreA
GetLogicalDriveStringsW
lstrcpynA
CreateMutexW
GetDevicePowerState

user32

ReplyMessage
HideCaret
CopyAcceleratorTableW
EnumThreadWindows
GetDlgItemTextW
ScrollWindowEx
WindowFromDC
LoadBitmapW
MapVirtualKeyExW
LoadAcceleratorsW
GetDC
WinHelpA
IsCharLowerA
GetMenuStringW
GetClipCursor
CopyImage
DialogBoxIndirectParamW
DrawTextA
DlgDirSelectExW
InvalidateRgn
DrawTextExW
TranslateMessage
SetCursorPos
GetRawInputBuffer
PeekMessageW
TranslateAcceleratorA
GetListBoxInfo
GetTabbedTextExtentA
SetMenu
AdjustWindowRectEx
MessageBoxW
MapWindowPoints
LoadKeyboardLayoutA
SetWindowTextW
CopyRect
GetMessageTime
DispatchMessageW
GetWindowThreadProcessId
SetPropA

gdi32

ScaleWindowExtEx
GetTextExtentPointW
GetOutlineTextMetricsW
CreateBrushIndirect
BeginPath
GetCurrentObject
GetCharWidthW
Arc
GetCharABCWidthsI
RemoveFontResourceA
GetLayout
GetEnhMetaFileA
SetPixel
PolyTextOutA

advapi32

GetAce
AddAuditAccessObjectAce
AreAllAccessesGranted
BackupEventLogW

Exports

Exports

__RemovePropW@12

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.exdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.page
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bmem
Size: 512B - Virtual size: 68B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedat
Size: 1024B - Virtual size: 612B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 124KB - Virtual size: 124KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 958B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 108KB - Virtual size: 108KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

8ae74cf5b0e52f8704cac79b7955e656

Headers

File Characteristics

Imports

shlwapi

shell32

kernel32

user32

gdi32

advapi32

Exports

Exports

Sections

.text Size: 11KB - Virtual size: 10KB

.exdata Size: 3KB - Virtual size: 3KB

.data Size: 3KB - Virtual size: 3KB

.page Size: 512B - Virtual size: 88B

.bmem Size: 512B - Virtual size: 68B

.sedat Size: 1024B - Virtual size: 612B

.rsrc Size: 124KB - Virtual size: 124KB

.reloc Size: 1024B - Virtual size: 958B

.text Size: 108KB - Virtual size: 108KB

.text
Size: 11KB - Virtual size: 10KB

.exdata
Size: 3KB - Virtual size: 3KB

.data
Size: 3KB - Virtual size: 3KB

.page
Size: 512B - Virtual size: 88B

.bmem
Size: 512B - Virtual size: 68B

.sedat
Size: 1024B - Virtual size: 612B

.rsrc
Size: 124KB - Virtual size: 124KB

.reloc
Size: 1024B - Virtual size: 958B

.text
Size: 108KB - Virtual size: 108KB