2a478c11f2ad0b7853178ccee34c8ed3_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

2a478c11f2ad0b7853178ccee34c8ed3_JaffaCakes118
Size

192KB
MD5

2a478c11f2ad0b7853178ccee34c8ed3
SHA1

f8b7b3b9670cbdb334f576b078973ef6050d9479
SHA256

624b576bc8909338bfedf78db6521d7467fe0972760c965f8244bac467da021e
SHA512

aaf6c3b331b9f455eca527a741d74f5f46b23185db7ff42cce65a7bff0d92a90e0a5a02f6763a8b81fd14cc3033abe10f83d001dfad6d19409ba4c71375760ff
SSDEEP

3072:W2Ta0E+hES8LHz8h1lX9GrXmkNap91g1e12:Wj0E+hlf3GrXst

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2a478c11f2ad0b7853178ccee34c8ed3_JaffaCakes118

Files

2a478c11f2ad0b7853178ccee34c8ed3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

52a009d3ce5db4682a8954442b8587ae

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

comdlg32

FindTextA

oleaut32

SafeArrayCreate
SafeArrayGetElement
RegisterTypeLib
SysStringLen
SafeArrayUnaccessData
VariantCopyInd
OleLoadPicture

user32

IsChild
CharNextA
RemovePropA
ReleaseCapture
ActivateKeyboardLayout
DefWindowProcA
SetWindowLongA
SetClipboardData
EnableScrollBar
WaitMessage
RemoveMenu
GetSubMenu
GetKeyState
PostMessageA
UpdateWindow
GetSysColorBrush
LoadCursorA
ScreenToClient
GetWindow
IsWindowEnabled
GetKeyboardLayout
SetScrollPos
BeginPaint
KillTimer
GetKeyboardLayoutNameA
FrameRect
ChildWindowFromPoint
DrawTextA
wsprintfA
PostQuitMessage
DefMDIChildProcA
PtInRect
SendMessageW
SetWindowPos
GetActiveWindow
CallWindowProcA
GetMenu
EnumWindows
CheckMenuItem
IsIconic
SetActiveWindow
GetClipboardData
GetWindowRect
SetCursor
EmptyClipboard
RegisterWindowMessageA
DestroyCursor
DrawMenuBar
DestroyIcon
DeleteMenu
EndPaint
SetScrollInfo
SystemParametersInfoA
IsWindow
InsertMenuA
EnumChildWindows
SetTimer
DrawFrameControl
TranslateMessage
MessageBoxA
MoveWindow
GetSystemMenu
InflateRect
GetMenuStringA
GetClassNameA
DestroyMenu
CallNextHookEx
GetKeyboardState
LoadKeyboardLayoutA
GetWindowLongW
PeekMessageA
GetCursor
CreateIcon

ole32

CreateBindCtx
CoRegisterClassObject
MkParseDisplayName

shell32

SHGetFileInfoA
SHGetDiskFreeSpaceA
SHGetFolderPathA

kernel32

LocalAlloc
GetModuleHandleA
ExitThread
GetACP
VirtualAlloc
GetVersionExA
GetProcAddress
GetOEMCP
LoadLibraryA
ExitProcess
VirtualAllocEx
GetLastError
LoadLibraryExA
IsBadReadPtr

advapi32

GetUserNameA
RegEnumValueA

version

VerInstallFileA
GetFileVersionInfoA

Sections

.text
Size: 55KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 123KB - Virtual size: 123KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RSRC0
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RSRC5
Size: 1024B - Virtual size: 671B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RSRC1
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.RSRC7
Size: 1024B - Virtual size: 705B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.RSRC3
Size: 512B - Virtual size: 42B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RSRC8
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 992B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

52a009d3ce5db4682a8954442b8587ae

Headers

File Characteristics

Imports

comdlg32

oleaut32

user32

ole32

shell32

kernel32

advapi32

version

Sections

.text Size: 55KB - Virtual size: 55KB

.data Size: 123KB - Virtual size: 123KB

.RSRC0 Size: 4KB - Virtual size: 4KB

.RSRC5 Size: 1024B - Virtual size: 671B

.RSRC1 Size: 2KB - Virtual size: 1KB

.RSRC7 Size: 1024B - Virtual size: 705B

.RSRC3 Size: 512B - Virtual size: 42B

.RSRC8 Size: 2KB - Virtual size: 1KB

.rsrc Size: 1024B - Virtual size: 992B

.text
Size: 55KB - Virtual size: 55KB

.data
Size: 123KB - Virtual size: 123KB

.RSRC0
Size: 4KB - Virtual size: 4KB

.RSRC5
Size: 1024B - Virtual size: 671B

.RSRC1
Size: 2KB - Virtual size: 1KB

.RSRC7
Size: 1024B - Virtual size: 705B

.RSRC3
Size: 512B - Virtual size: 42B

.RSRC8
Size: 2KB - Virtual size: 1KB

.rsrc
Size: 1024B - Virtual size: 992B