1138b33ad67d6ed5195c2b9de465398f_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

1138b33ad67d6ed5195c2b9de465398f_JaffaCakes118
Size

105KB
MD5

1138b33ad67d6ed5195c2b9de465398f
SHA1

b2d3e31471eb478e040ef1758cc4d81425cc6e08
SHA256

de2608b32fa7056ff424cd660656ec34e741029bb6fd5b237f152e59d4fa211c
SHA512

65bbd655892c300b245c3df7eedee5d30c6fa706a44bdef643ec34c92d80df3136a464eae5a57966fd72dcc1e702650cb24f3fff85cb322eb4f1e1b82cace5cf
SSDEEP

1536:yr7EGb0CEIG/lEcmfPxJTOKA9yF4h8UClPSOnqUpq1vAGC/9koY:yr7EGb0CC/lEcmfrjGyF4hdhOnPCvBH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1138b33ad67d6ed5195c2b9de465398f_JaffaCakes118

Files

1138b33ad67d6ed5195c2b9de465398f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e4e3f670e02de472fb8d631eeb6881d5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

memmove
memcmp
log10

kernel32

GetProcAddress
GlobalAddAtomA
GetStringTypeW
GetACP
VirtualAlloc
HeapAlloc
GetModuleHandleA
FreeLibrary
lstrcmpiA
ExitProcess
LoadLibraryExA

shell32

DragQueryFileA

oleaut32

VariantCopyInd
SafeArrayPtrOfIndex
SysStringLen

gdi32

GetCurrentPositionEx

user32

PeekMessageW
ShowOwnedPopups
TranslateMessage
RemoveMenu
EqualRect
CheckMenuItem
InsertMenuItemA
SetWindowLongA
GetClassNameA
RegisterClipboardFormatA
GetKeyboardLayoutList
IsDialogMessageA
SetClipboardData
UpdateWindow
FrameRect
SetCursor
EmptyClipboard
SetScrollInfo
IsIconic
EnumChildWindows
GetCapture
GetKeyboardType
GetSysColor
MoveWindow
ReleaseCapture
LoadStringA
GetMenuItemCount
FindWindowA
MsgWaitForMultipleObjects
EnumThreadWindows
DefMDIChildProcA
TranslateMDISysAccel
GetWindowPlacement
PeekMessageA
CharNextA
CharUpperBuffA
TrackPopupMenu
GetTopWindow
DefWindowProcA
GetDC
ShowScrollBar
DrawIcon
RegisterWindowMessageA
GetClassInfoA
GetIconInfo
DispatchMessageA
SendMessageW
GetWindowLongW
CharToOemA
GetClipboardData
GetFocus
InsertMenuA
IsZoomed
OffsetRect
GetMenuItemID
EnableScrollBar
CreatePopupMenu
wsprintfA
IsRectEmpty
RemovePropA
ScrollWindow
GetMenu
SetForegroundWindow
IsWindowVisible
WindowFromPoint
SendMessageA
GetPropA
DrawTextA
IsDialogMessageW
SetScrollRange
GetSystemMetrics
LoadKeyboardLayoutA
RedrawWindow
SetWindowsHookExA
LoadIconA
EnableMenuItem
UnhookWindowsHookEx
GetSubMenu
EndPaint
UnregisterClassA
GetCursor
MapWindowPoints
MapVirtualKeyA
SetClassLongA
GetParent
SetWindowPos
ChildWindowFromPoint
CallNextHookEx
GetMenuState
GetLastActivePopup
GetMessagePos
GetActiveWindow
DeleteMenu
GetDCEx
DestroyWindow
IsWindow
ClientToScreen
SetMenu
DrawAnimatedRects
SetCapture
SetWindowPlacement
GetScrollInfo
GetWindowTextA
GetSystemMenu
GetScrollPos
GetClassLongA
EnableWindow
SetRect
SetPropA
SetActiveWindow
GetForegroundWindow

comdlg32

ChooseColorA
GetOpenFileNameA
GetSaveFileNameA
GetFileTitleA
FindTextA

shlwapi

PathGetCharTypeA
SHQueryValueExA
SHDeleteKeyA
SHStrDupA

advapi32

GetUserNameA
RegQueryValueA
RegOpenKeyA

version

VerQueryValueA
GetFileVersionInfoSizeA

comctl32

ImageList_Remove
ImageList_DrawEx
ImageList_Draw

ole32

CoDisconnectObject
OleRegGetUserType
CoGetContextToken
MkParseDisplayName
CoTaskMemFree
CoReleaseMarshalData
CoGetObjectContext
CoUninitialize
ReleaseStgMedium
CoCreateGuid

Sections

.text
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: 512B - Virtual size: 402B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 73KB - Virtual size: 73KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

e4e3f670e02de472fb8d631eeb6881d5

Headers

File Characteristics

Imports

msvcrt

kernel32

shell32

oleaut32

gdi32

user32

comdlg32

shlwapi

advapi32

version

comctl32

ole32

Sections

.text Size: 30KB - Virtual size: 30KB

.bss Size: 512B - Virtual size: 402B

.idata Size: 73KB - Virtual size: 73KB

.text
Size: 30KB - Virtual size: 30KB

.bss
Size: 512B - Virtual size: 402B

.idata
Size: 73KB - Virtual size: 73KB