133df23eaeeb0fdc607899e36178e82a_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

133df23eaeeb0fdc607899e36178e82a_JaffaCakes118
Size

104KB
MD5

133df23eaeeb0fdc607899e36178e82a
SHA1

2ebe6d68e16b55015ac0c7dbc952fd749d16e139
SHA256

ee2650783bc0ae153ec647175f38556c0cb32252dae42a8186ecbfaae785d5d9
SHA512

e0c5ba59446bbfa49d77790f9eb680f54c642cedfb0f1d6ae5d77f500ae08e1ae0be2f9d28c52168d81a90ff203ed738383af2ac52cb12ce83a83dc4eac0e31f
SSDEEP

1536:14yeHgDBqSFxaMdTUCG0FDdSnBRAeZl5lUPrpSxaI6Ac5rTSazNZJRSVrJqC:1yLCnQnce4jxI6AcFhIVrsC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
133df23eaeeb0fdc607899e36178e82a_JaffaCakes118

Files

133df23eaeeb0fdc607899e36178e82a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

cd658773152bfbbdb2c4262fe0d93da6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegCreateKeyExA
RegDeleteValueA
RegOpenKeyExA

user32

GetSysColor
GetForegroundWindow
EndDeferWindowPos
GetKeyState
EnumThreadWindows
GetScrollPos
GetLastActivePopup
FindWindowA
CharToOemA
EqualRect
SystemParametersInfoA
EnableMenuItem
GetWindow
RegisterClassA
CharLowerA
SetWindowTextA
EnableScrollBar
GetCursor
IsWindowEnabled
FillRect
DefWindowProcA
GetDesktopWindow
DrawTextA
GetMenuState
ShowScrollBar
CheckMenuItem
GetDlgItem
IsWindowVisible
GetKeyNameTextA
GetMenu
IsDialogMessageA
GetScrollRange
BeginDeferWindowPos
DrawMenuBar
ClientToScreen
IsChild
DeferWindowPos
GetClassInfoA
GetDCEx
TrackPopupMenu
CharNextA
GetParent
GetMenuItemCount
EnumWindows
GetFocus
CreateWindowExA
CreatePopupMenu
GetIconInfo
DefMDIChildProcA
DrawFrameControl
GetSysColorBrush
GetDC
CreateMenu
GetPropA
GetMenuItemInfoA
GetMenuItemID
GetMessagePos
FrameRect
DrawEdge
DispatchMessageA
GetSubMenu
DrawIconEx
GetMenuStringA
SetCursor
DrawIcon
EnumChildWindows
SetWindowLongA
DefFrameProcA
HideCaret
GetCursorPos
EnableWindow

shlwapi

SHDeleteValueA
PathIsDirectoryA
SHQueryValueExA
PathGetCharTypeA
PathIsContentTypeA

version

GetFileVersionInfoSizeA
VerFindFileA
VerInstallFileA

oleaut32

VariantChangeType
RegisterTypeLib
OleLoadPicture
SafeArrayCreate
SysReAllocStringLen
SafeArrayPtrOfIndex
SysStringLen
SysAllocStringLen
SysFreeString

shell32

SHGetFileInfoA
SHGetFolderPathA
SHGetSpecialFolderLocation

comctl32

ImageList_DrawEx
ImageList_Add
ImageList_GetBkColor
ImageList_Draw
ImageList_Remove
ImageList_Create
ImageList_Read
ImageList_DragShowNolock
ImageList_Destroy

kernel32

GetModuleHandleA
HeapDestroy
GetCommandLineA
GetEnvironmentStrings
GetStringTypeW
LoadLibraryExA
GetFileSize
FreeLibrary
GetModuleFileNameA
GetCPInfo
ReadFile
ExitThread
GetFileAttributesA
SetHandleCount
WriteFile
GetTickCount
InitializeCriticalSection
GetFileType
GetVersionExA
VirtualAllocEx
SetThreadLocale
FindFirstFileA
GetThreadLocale
GetACP
GetLocaleInfoA
LocalAlloc
GetProcessHeap
lstrcpynA
LoadLibraryA
GetVersion
GetCurrentProcess
SetEndOfFile

msvcrt

memmove
memcpy
strncmp
calloc
exit
tolower
wcschr
strlen
wcsncmp
malloc
sqrt
swprintf

ole32

CoReleaseMarshalData
CLSIDFromString
CoUninitialize
CreateOleAdviseHolder
StringFromIID
StgCreateDocfileOnILockBytes
CreateBindCtx

Sections

.1
Size: 45KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

9
Size: 47KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.8
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

cd658773152bfbbdb2c4262fe0d93da6

Headers

File Characteristics

Imports

advapi32

user32

shlwapi

version

oleaut32

shell32

comctl32

kernel32

msvcrt

ole32

Sections

.1 Size: 45KB - Virtual size: 45KB

9 Size: 47KB - Virtual size: 46KB

.8 Size: 10KB - Virtual size: 10KB

.1
Size: 45KB - Virtual size: 45KB

9
Size: 47KB - Virtual size: 46KB

.8
Size: 10KB - Virtual size: 10KB