11de1dad2c4fe833a84282322f123562_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

11de1dad2c4fe833a84282322f123562_JaffaCakes118
Size

164KB
MD5

11de1dad2c4fe833a84282322f123562
SHA1

16315372a97a50e2e98665a78431b2cca4f29178
SHA256

9acf909028254846cc5de95451df0cbe234d5b45da91b980c22215fac897da80
SHA512

dc862ba8752643c8ca83e65a302e61a13bb17dba28e31545cd96589bcdf5fe28485731db16b6f9fa28d04c1b40213ada6c722fbd3c0cfc17401ea984d83a06d0
SSDEEP

3072:s3+/zzdsyC7jA9vGMg1Obuqd6XZafyrlA24HObYy2YxQJ6EJEXBr:RdN4c9v8kn6pa65Ad4cYxlIE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
11de1dad2c4fe833a84282322f123562_JaffaCakes118

Files

11de1dad2c4fe833a84282322f123562_JaffaCakes118
.exe windows:4 windows x86 arch:x86

979d19ac7eb29afb9f36b2bc12a77086

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

CoCreateInstance
StringFromGUID2
CoUninitialize
OleInitialize
OleUninitialize
CoFreeUnusedLibraries
CoInitialize

avifil32

AVISaveOptions
AVIMakeCompressedStream

shell32

SHGetSpecialFolderLocation
SHGetDesktopFolder
SHGetPathFromIDListW
DragQueryFileW
SHGetMalloc
SHGetFileInfoW

user32

IsWindow
DrawTextW
UnionRect
SetTimer
CopyRect
LoadCursorW
GetSysColor
GetSystemMetrics
TrackPopupMenuEx
SetCapture
wsprintfW
ReleaseCapture
ShowScrollBar
SendMessageW
SetRectEmpty
GetParent
SetCursor
DrawFocusRect
CreatePopupMenu
FillRect
LoadImageW
OffsetRect
GetWindowRect
GetSysColorBrush
SetFocus
ClientToScreen
SetRect
PtInRect
GetClientRect
KillTimer
ScreenToClient
PostMessageW
DestroyMenu
SetWindowLongW
IsWindowVisible
UpdateWindow
BringWindowToTop
SetForegroundWindow
FindWindowExW
GetDC
EqualRect
IsRectEmpty
GetWindowLongW
GetDesktopWindow
FrameRect
GetCursorPos
GetActiveWindow
ReleaseDC
IntersectRect
InflateRect
EnableWindow
DefWindowProcW
InvalidateRect

advapi32

RegCloseKey
RegOpenKeyExW
RegCreateKeyW
RegSetValueExW
RegEnumKeyExW
RegSetValueW
RegDeleteKeyW

kernel32

ResetEvent
GetLastError
WaitForSingleObject
InterlockedIncrement
Sleep
ReplaceFileW
MulDiv
EnterCriticalSection
CreateThread
GetTickCount
FileTimeToSystemTime
GetProcessId
GetModuleHandleW
QueryPerformanceCounter
FindClose
GlobalReAlloc
GetProcAddress
GetACP
FindFirstChangeNotificationW
CreateEventW
GlobalLock
GetModuleFileNameA
lstrlenA
lstrlenW
InitializeCriticalSection
LeaveCriticalSection
InterlockedExchange
FindCloseChangeNotification
FindFirstFileW
GetDriveTypeW
EnumResourceTypesA
GetCurrentThreadId
GetSystemTimeAsFileTime
GlobalUnlock
CloseHandle
MultiByteToWideChar
ExitProcess
FindNextChangeNotification
GetVersionExW
GlobalAlloc
DeleteCriticalSection
InterlockedDecrement
GetFullPathNameW
DisableThreadLibraryCalls
lstrcpynW
FreeLibrary
SetEvent
GetLocaleInfoA
GetCurrentProcessId
WideCharToMultiByte
GetThreadLocale
FileTimeToLocalFileTime
GetVersionExA

Sections

.text
Size: 96KB - Virtual size: 95KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: 63KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 1024B - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

979d19ac7eb29afb9f36b2bc12a77086

Headers

File Characteristics

Imports

ole32

avifil32

shell32

user32

advapi32

kernel32

Sections

.text Size: 96KB - Virtual size: 95KB

.rdata Size: 3KB - Virtual size: 3KB

.bss Size: 63KB - Virtual size: 62KB

.tls Size: 1024B - Virtual size: 104KB

.text
Size: 96KB - Virtual size: 95KB

.rdata
Size: 3KB - Virtual size: 3KB

.bss
Size: 63KB - Virtual size: 62KB

.tls
Size: 1024B - Virtual size: 104KB