1539910f478879f066ee09114894879c_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

1539910f478879f066ee09114894879c_JaffaCakes118
Size

170KB
MD5

1539910f478879f066ee09114894879c
SHA1

2d470446893b07fa31b03b99487d2dfa4398f1d9
SHA256

b12cbffa35fd9af98b576bbe65509041bc119df42f43f51d554feaff26978c37
SHA512

a73b7601a950bd52fef61ad50893d5ad8a46ca861850d070ee70d2ed29a10f375c0e1585a20d63c7cbb0197acd33411f6f2a8a7301000943393d6e4dddcc1acd
SSDEEP

3072:3dXUZqly6PXavJ3zVzpAjvUDWoRTE+7CJ7FMVfv7Yb8LGUSiZzf0:3+ZWcvtBpAwDHTE17Fwv7S8LGUjf0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1539910f478879f066ee09114894879c_JaffaCakes118

Files

1539910f478879f066ee09114894879c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c3112a84a07d1064f4a77c4e50d77191

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

ShellExecuteA

kernel32

GetVersionExA
GetPrivateProfileSectionW
lstrcmpW
GetLastError
GetModuleHandleW
GetCurrentProcess
lstrcmpiW
GetModuleHandleW
FindNextFileW
FindFirstFileW
SetFileAttributesW

user32

SendDlgItemMessageW
IsDialogMessageW
SetWindowTextW
MoveWindow
GetWindowRect
GetWindowPlacement
SystemParametersInfoA
CallWindowProcW
DefWindowProcW
PtInRect
DeferWindowPos
ScreenToClient
RegisterClassW
GetClassInfoExW
CreateWindowExW
MessageBoxW
GetClientRect
SetForegroundWindow
TrackPopupMenu
MapWindowPoints
GetMessagePos
GetMessageTime
UnhookWindowsHookEx
DestroyWindow
GetTopWindow
EndDeferWindowPos
BeginDeferWindowPos
DispatchMessageW
GetForegroundWindow

gdi32

DeleteObject

advapi32

RegCreateKeyA
RegCloseKey
RegSetValueA
RegSetValueExA
RegOpenKeyExA
RegEnumKeyExA
RegDeleteKeyA

gdiplus

GdipDeleteGraphics
GdipAlloc
GdipFree
GdipDisposeImage
GdipGetImageWidth
GdipGetImageHeight
GdipGetImagePixelFormat
GdipGetImagePaletteSize
GdipGetImagePalette
GdipCreateBitmapFromFile
GdipCreateBitmapFromScan0
GdipBitmapLockBits
GdipCloneImage
GdipDrawImageI
GdipGetImageGraphicsContext
GdiplusShutdown
GdiplusStartup
GdipBitmapUnlockBits

ole32

CoFreeUnusedLibraries
CoSetProxyBlanket
CoDisconnectObject
CoTaskMemAlloc
CreateStreamOnHGlobal
StringFromGUID2
CoUninitialize
CoInitialize
CoCreateInstance
CoTaskMemFree

Sections

.text
Size: 113KB - Virtual size: 113KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 52KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 304B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c3112a84a07d1064f4a77c4e50d77191

Headers

File Characteristics

Imports

shell32

kernel32

user32

gdi32

advapi32

gdiplus

ole32

Sections

.text Size: 113KB - Virtual size: 113KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 52KB - Virtual size: 52KB

.reloc Size: 512B - Virtual size: 304B

.text
Size: 113KB - Virtual size: 113KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 52KB - Virtual size: 52KB

.reloc
Size: 512B - Virtual size: 304B