161faa56aafd4286908d15662f934bf8_JaffaCakes118

General

Target

161faa56aafd4286908d15662f934bf8_JaffaCakes118
Size

155KB
MD5

161faa56aafd4286908d15662f934bf8
SHA1

ad10a0a066a475e56dbd3e1fef47753841f040c3
SHA256

b9e6714b799f17140cdea8e4720b9e15e5699125ca02b2cf364b4308407423b5
SHA512

8adcec1697bf768563c73b12ebfd8081b318c88c06b9d4fed070d350f7ac764f61003bf4dd4b41fb3f2a0a98e7c2d773eeda6c27af64c7f1919d82f56a7061a5
SSDEEP

3072:0QfYsrMvfk7x3nj81ytAjLBRXNLu9mtYNfOBC9MS235ONfi6vmscnd7a4:0QfYsb79j8EWQB8CK3pOVi6+Pd7a

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
161faa56aafd4286908d15662f934bf8_JaffaCakes118

Files

161faa56aafd4286908d15662f934bf8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

41a9e924c8dd5caf8495cc59bc3b3732

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comdlg32

GetOpenFileNameA
ChooseFontA
GetSaveFileNameA
CommDlgExtendedError

shlwapi

PathIsUNCW

kernel32

GetVersionExA
GetPrivateProfileStringW
GetFileAttributesW
GetModuleFileNameW
LoadLibraryW
SuspendThread
WaitForMultipleObjects
CreateEventW
FindNextFileW
OutputDebugStringW

user32

CharPrevW
CharNextW
LoadStringW
MessageBoxW
IsDlgButtonChecked
SetFocus
GetDlgItem
CheckRadioButton
DialogBoxParamW
GetDlgItemTextW
MessageBoxExW

gdi32

DeleteObject

advapi32

RegCreateKeyA
RegCloseKey
RegSetValueA
RegSetValueExA
RegOpenKeyExA
RegEnumKeyExA
RegDeleteKeyA

gdiplus

GdipDeleteGraphics
GdipAlloc
GdipFree
GdipDisposeImage
GdipGetImageWidth
GdipGetImageHeight
GdipGetImagePixelFormat
GdipGetImagePalette
GdipCreateBitmapFromFile
GdipBitmapLockBits
GdipCloneImage

ole32

CoTaskMemAlloc
CoIsHandlerConnected
CoGetDefaultContext
CoTestCancel
CoInitialize
CoTaskMemFree

Sections

.text
Size: 130KB - Virtual size: 130KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 330B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

41a9e924c8dd5caf8495cc59bc3b3732

Headers

File Characteristics

Imports

comdlg32

shlwapi

kernel32

user32

gdi32

advapi32

gdiplus

ole32

Sections

.text Size: 130KB - Virtual size: 130KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 21KB - Virtual size: 21KB

.reloc Size: 512B - Virtual size: 330B

.text
Size: 130KB - Virtual size: 130KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 21KB - Virtual size: 21KB

.reloc
Size: 512B - Virtual size: 330B