295043602dab00a7f35b675310946801_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

295043602dab00a7f35b675310946801_JaffaCakes118
Size

277KB
MD5

295043602dab00a7f35b675310946801
SHA1

49a2b6d8e1873ff3699cb24b2b5b01c9a327280a
SHA256

699177687df31403e0a1677c855845c8a2fff1bd84e0cd816def4b02cb612be9
SHA512

6ff83283a8c29dd7c7f3feff8edaa78035b0517857ba0ec88efe883264b31ca6ec76c4d669c67132279eccbf338e6d1e3c037a2a388525963b8703c648689537
SSDEEP

6144:bxW0KmxJkyF38G+SKCYSWdMzZScahC+x/6G+Lubma7hA:bR9JkQ38SK1SW085C+RZm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
295043602dab00a7f35b675310946801_JaffaCakes118

Files

295043602dab00a7f35b675310946801_JaffaCakes118
.dll windows:4 windows x86 arch:x86

2d688c71bd2681311d8e704cabb9c687

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

comdlg32

GetSaveFileNameA
ChooseColorA
GetOpenFileNameA

shlwapi

SHQueryValueExA
SHGetValueA
SHSetValueA
SHQueryInfoKeyA

oleaut32

SysReAllocStringLen
VariantChangeType
VariantCopyInd
SysFreeString
SafeArrayGetUBound
OleLoadPicture
SysAllocStringLen

msvcrt

time

user32

UnhookWindowsHookEx
DestroyCursor
GetSystemMetrics
ChildWindowFromPoint
EnumChildWindows
SetWindowPos
SetWindowTextA
GetMenuStringA
CharToOemA
SetRect
MoveWindow
RegisterClipboardFormatA
GetDC
GetKeyboardLayout
PostQuitMessage
BeginPaint
MapVirtualKeyA
GetKeyboardState
CreateIcon
GetActiveWindow
GetMenuState

kernel32

GetCommandLineW
LoadLibraryExA
GetProcAddress
LoadLibraryA
GetCommandLineA
GetModuleFileNameA
WideCharToMultiByte
GetModuleHandleA
VirtualAlloc
HeapAlloc
GetProcessHeap
GetLastError
ExitThread
GetTickCount
GetOEMCP
ExitProcess
GetCurrentThreadId
EnterCriticalSection

Sections

CODE
Size: 83KB - Virtual size: 83KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 421B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 91KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

BSS
Size: 169KB - Virtual size: 168KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2d688c71bd2681311d8e704cabb9c687

Headers

File Characteristics

Imports

comdlg32

shlwapi

oleaut32

msvcrt

user32

kernel32

Sections

CODE Size: 83KB - Virtual size: 83KB

.rdata Size: 512B - Virtual size: 421B

.data Size: 11KB - Virtual size: 91KB

BSS Size: 169KB - Virtual size: 168KB

.rsrc Size: 9KB - Virtual size: 9KB

.reloc Size: 2KB - Virtual size: 1KB

CODE
Size: 83KB - Virtual size: 83KB

.rdata
Size: 512B - Virtual size: 421B

.data
Size: 11KB - Virtual size: 91KB

BSS
Size: 169KB - Virtual size: 168KB

.rsrc
Size: 9KB - Virtual size: 9KB

.reloc
Size: 2KB - Virtual size: 1KB