289e5c7d21008ad69193e011abce036f_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

289e5c7d21008ad69193e011abce036f_JaffaCakes118
Size

72KB
MD5

289e5c7d21008ad69193e011abce036f
SHA1

244ca7821b850b09d68a58cc6ab43699ce947693
SHA256

b9a0d7ab800f6d8cd1e31dbf0555af4a2ca64f02874bcdf20ff3918c28680c95
SHA512

03f5dec68f315540701ad0d28b5f0239aeca9e13fa6657babc45bf81e89681b957e848368385ffe6e26697e2936f9ba8f88d31b741c63ba49c028a5d8fdfb257
SSDEEP

768:xDkfWemN0AQn7N6c2V7RfPrkHr8fxCU3imrGf+DmjpiMH19kF4x4UwNsQd4iuL:qfWeK0tgc2VVLpffqHjpp19VxRw6QLuL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
289e5c7d21008ad69193e011abce036f_JaffaCakes118

Files

289e5c7d21008ad69193e011abce036f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

16e2b3e20238008b693eb578d1ea4717

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalDeleteAtom
GetProcessHeap
IsBadReadPtr
DeleteFileA
ExitProcess
GlobalAlloc
WriteFile
RaiseException
WaitForSingleObject
ReadFile
lstrlenA
GetTickCount
GetCommandLineW
GetUserDefaultLCID
VirtualAlloc
GlobalFindAtomA
HeapAlloc
LoadLibraryA
LocalAlloc
GetCurrentProcessId
VirtualQuery
GetLastError
GetLocaleInfoA

user32

RegisterWindowMessageA
GetMenuStringA
SetScrollPos
SendMessageW
DispatchMessageW
SetWindowsHookExA
IsDlgButtonChecked
CharNextW
MsgWaitForMultipleObjects
GetPropA
LoadIconA
GetKeyboardLayout
DispatchMessageA
SetParent
CallWindowProcA
GetWindowLongW
SetScrollInfo
DefFrameProcA
SetClassLongA
UpdateWindow
GetLastActivePopup
KillTimer
IsCharUpperA
GetIconInfo
SetPropA
RemovePropA
DefMDIChildProcA
GetSystemMenu
IsChild
ClientToScreen
IsWindow
GetWindowPlacement
GetKeyState
TranslateMDISysAccel
GetSysColorBrush
DrawFrameControl
PostMessageA
GetKeyboardState
IsZoomed
GetSysColor
GetTopWindow
CharLowerBuffA
BeginPaint
EqualRect
IsWindowUnicode
TranslateMessage
wsprintfA
FindWindowA
SetRect
GetWindowTextA
DrawIcon
GetClientRect
GetScrollPos
EnumWindows
SetTimer
GetWindowLongA
SetCursor
PtInRect
GetMenu
DrawMenuBar
MapVirtualKeyA
PostQuitMessage
ScreenToClient
InsertMenuItemA
GetWindowRect
EndPaint
ActivateKeyboardLayout
CreatePopupMenu
WindowFromPoint
SetCapture
DrawTextA
GetClassInfoA
GetActiveWindow
GetWindowTextLengthA
DestroyMenu
SetWindowPos
SetMenu
IsWindowEnabled
ShowWindow
DefWindowProcA
ShowScrollBar
InvalidateRect
GetKeyboardLayoutList
GetMenuItemInfoA
InsertMenuA
AdjustWindowRectEx
ScrollWindow
IsDialogMessageW
SetWindowTextA
DestroyCursor
LoadStringA
GetCursorPos
RedrawWindow
UnregisterClassA
SendMessageA
IsIconic
GetKeyboardLayoutNameA
SetFocus
CallNextHookEx
EnumThreadWindows
DrawEdge
GetDesktopWindow
DestroyWindow
EnableMenuItem
RegisterClipboardFormatA
GetFocus
EmptyClipboard
IsMenu
GetMenuItemCount
LoadKeyboardLayoutA
GetForegroundWindow
CharUpperBuffA
SetClipboardData
GetMenuState
DestroyIcon

gdi32

GetDIBColorTable
SelectObject
SelectPalette
CreateFontIndirectA

ole32

CoRevokeClassObject
CLSIDFromProgID

comdlg32

ChooseColorA
GetFileTitleA
GetOpenFileNameA

Exports

Exports

lSgk9k4tn@12
qWST4fDOEOaPp@16
yoDcC8vk_F
_Nf3jnN@20
_d420jRrL@12

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 55KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1020B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

16e2b3e20238008b693eb578d1ea4717

Headers

File Characteristics

Imports

kernel32

user32

gdi32

ole32

comdlg32

Exports

Exports

Sections

.text Size: 9KB - Virtual size: 8KB

.rdata Size: 5KB - Virtual size: 37KB

.data Size: 55KB - Virtual size: 54KB

.rsrc Size: 1024B - Virtual size: 1020B

.text
Size: 9KB - Virtual size: 8KB

.rdata
Size: 5KB - Virtual size: 37KB

.data
Size: 55KB - Virtual size: 54KB

.rsrc
Size: 1024B - Virtual size: 1020B