1304058a86fb219437ec97facef1e159_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

1304058a86fb219437ec97facef1e159_JaffaCakes118
Size

104KB
MD5

1304058a86fb219437ec97facef1e159
SHA1

ef36946ff2d6403d2e066eb0255cc9c9e47cde33
SHA256

cf1b2c8b597f8e98f2d8c37b06c7b2e08cdd41ea6194d12c956fc8086caaff45
SHA512

a21efec9fb9829ac1b01ee1716298954d7b48cd7d714ac6c18c7ab8885d4c9d6f95c8258528a55eba1a844cfbbddbfec3294579a382187afa298e858b243594e
SSDEEP

1536:14yeHgDBqSFxaMdTUCG0FDdSnBRAeZl5lUPrpSxaI6Ac5rTSazNZJRSVrJqC:1yLCnQnce4jxI6AcFhIVrsC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1304058a86fb219437ec97facef1e159_JaffaCakes118

Files

1304058a86fb219437ec97facef1e159_JaffaCakes118
.exe windows:4 windows x86 arch:x86

cd658773152bfbbdb2c4262fe0d93da6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegCreateKeyExA
RegDeleteValueA
RegOpenKeyExA

user32

GetSysColor
GetForegroundWindow
EndDeferWindowPos
GetKeyState
EnumThreadWindows
GetScrollPos
GetLastActivePopup
FindWindowA
CharToOemA
EqualRect
SystemParametersInfoA
EnableMenuItem
GetWindow
RegisterClassA
CharLowerA
SetWindowTextA
EnableScrollBar
GetCursor
IsWindowEnabled
FillRect
DefWindowProcA
GetDesktopWindow
DrawTextA
GetMenuState
ShowScrollBar
CheckMenuItem
GetDlgItem
IsWindowVisible
GetKeyNameTextA
GetMenu
IsDialogMessageA
GetScrollRange
BeginDeferWindowPos
DrawMenuBar
ClientToScreen
IsChild
DeferWindowPos
GetClassInfoA
GetDCEx
TrackPopupMenu
CharNextA
GetParent
GetMenuItemCount
EnumWindows
GetFocus
CreateWindowExA
CreatePopupMenu
GetIconInfo
DefMDIChildProcA
DrawFrameControl
GetSysColorBrush
GetDC
CreateMenu
GetPropA
GetMenuItemInfoA
GetMenuItemID
GetMessagePos
FrameRect
DrawEdge
DispatchMessageA
GetSubMenu
DrawIconEx
GetMenuStringA
SetCursor
DrawIcon
EnumChildWindows
SetWindowLongA
DefFrameProcA
HideCaret
GetCursorPos
EnableWindow

shlwapi

SHDeleteValueA
PathIsDirectoryA
SHQueryValueExA
PathGetCharTypeA
PathIsContentTypeA

version

GetFileVersionInfoSizeA
VerFindFileA
VerInstallFileA

oleaut32

VariantChangeType
RegisterTypeLib
OleLoadPicture
SafeArrayCreate
SysReAllocStringLen
SafeArrayPtrOfIndex
SysStringLen
SysAllocStringLen
SysFreeString

shell32

SHGetFileInfoA
SHGetFolderPathA
SHGetSpecialFolderLocation

comctl32

ImageList_DrawEx
ImageList_Add
ImageList_GetBkColor
ImageList_Draw
ImageList_Remove
ImageList_Create
ImageList_Read
ImageList_DragShowNolock
ImageList_Destroy

kernel32

GetModuleHandleA
HeapDestroy
GetCommandLineA
GetEnvironmentStrings
GetStringTypeW
LoadLibraryExA
GetFileSize
FreeLibrary
GetModuleFileNameA
GetCPInfo
ReadFile
ExitThread
GetFileAttributesA
SetHandleCount
WriteFile
GetTickCount
InitializeCriticalSection
GetFileType
GetVersionExA
VirtualAllocEx
SetThreadLocale
FindFirstFileA
GetThreadLocale
GetACP
GetLocaleInfoA
LocalAlloc
GetProcessHeap
lstrcpynA
LoadLibraryA
GetVersion
GetCurrentProcess
SetEndOfFile

msvcrt

memmove
memcpy
strncmp
calloc
exit
tolower
wcschr
strlen
wcsncmp
malloc
sqrt
swprintf

ole32

CoReleaseMarshalData
CLSIDFromString
CoUninitialize
CreateOleAdviseHolder
StringFromIID
StgCreateDocfileOnILockBytes
CreateBindCtx

Sections

.1
Size: 45KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

9
Size: 47KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.8
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

cd658773152bfbbdb2c4262fe0d93da6

Headers

File Characteristics

Imports

advapi32

user32

shlwapi

version

oleaut32

shell32

comctl32

kernel32

msvcrt

ole32

Sections

.1 Size: 45KB - Virtual size: 45KB

9 Size: 47KB - Virtual size: 46KB

.8 Size: 10KB - Virtual size: 10KB

.1
Size: 45KB - Virtual size: 45KB

9
Size: 47KB - Virtual size: 46KB

.8
Size: 10KB - Virtual size: 10KB