3019a66c56c91afa3ae121044c05a12c_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

3019a66c56c91afa3ae121044c05a12c_JaffaCakes118
Size

203KB
MD5

3019a66c56c91afa3ae121044c05a12c
SHA1

5f10199ba75596691ab4fd23a48de0f4351ef849
SHA256

6a3e484efff78b6e4cf01f7a2f3e223ad5d0c23ba0a3d5df5c5ff00f9da2944b
SHA512

b6e8eeeb28a41031c5a8959508ecbcc02ff52dd5137fed47788cee90ebe23b343d0257aabca290d69a96953ac22c6c42aeae9cc07863f2b4cc8e880b5b6271b3
SSDEEP

6144:NGLm2t7osOG2YlcpXhv1egbHRa833zwgS8:oJt0sOG2K4hv1ZHYg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3019a66c56c91afa3ae121044c05a12c_JaffaCakes118

Files

3019a66c56c91afa3ae121044c05a12c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bf6c3e311c5303af37bad37fc7f4e86c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

PeekMessageW
ReleaseCapture
CreateIcon
IsWindowEnabled
EndDialog
CallNextHookEx
GetWindowLongW
SendMessageW
IsCharLowerA
GetScrollPos
BeginPaint
DestroyMenu
MsgWaitForMultipleObjects
EndPaint
SetFocus
LoadIconA
CreateWindowExA
OemToCharA
SetRect
EnumThreadWindows
GetSystemMenu
KillTimer
WaitMessage
GetClipboardData
InvalidateRect
MessageBoxA
CallWindowProcA
ShowOwnedPopups
wsprintfA
SetWindowPos
GetMenuStringA
CheckMenuItem
GetMenuItemCount
RegisterClassA
ActivateKeyboardLayout
IsCharUpperA
GetCursorPos
InsertMenuA
TranslateMDISysAccel
MoveWindow
SetWindowLongW
GetWindowThreadProcessId
GetKeyboardState
GetMessagePos
ShowWindow
SetTimer
GetSysColorBrush
GetWindowDC
IsMenu
GetIconInfo
SetParent
GetWindow
GetKeyboardLayoutNameA
ShowScrollBar
GetParent
GetWindowTextLengthA
SetActiveWindow
SetCursor
SystemParametersInfoA
GetMenu
SetWindowPlacement
EnableWindow
SetMenuItemInfoA
TrackPopupMenu
RemoveMenu
InflateRect
SetClassLongA
GetPropA
AdjustWindowRectEx
DestroyIcon
IsDialogMessageW
EmptyClipboard
RegisterWindowMessageA
GetLastActivePopup

shell32

SHGetFileInfoA
Shell_NotifyIconA
SHGetDiskFreeSpaceA
SHFileOperationA
SHGetSpecialFolderLocation

kernel32

FreeResource
ExitProcess
VirtualAlloc
FreeLibrary
LoadLibraryA
FormatMessageA
GetACP

gdi32

CreateDIBitmap
GetTextAlign
GetBitmapBits
GetRgnBox
GetBkMode
CreateBrushIndirect

Exports

Exports

_V7OjB
_nn3g0BBo
_Q5SBLf3HrgEl9C@8
_sHzpYlB@24
K353mJrVdSM98
_qdhGiYdb2DYP
_ox3LO6V9rVWCKP
40HP8_QBSJ_OK5@4
_fcfYcOI@24
TcXP884MhkSdi
_Y7pQJ
_UL4Tc_bdgpc
_IsjD0SVM6SUVA@24
cu3exMXrAuC4X
nJ7LL35@20
_WxOv6nsyt8_F
_6yDckmy5Bt_0p
pOR1a7@20
_oWmndz@20
_Jww5r@4
cVQ6kuIVrhJRU
UMhFXh2_Yxx4
FD8gTwvQOKRX
_JjQe5a
_9SypLyPYevyEq@20

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 187KB - Virtual size: 186KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

bf6c3e311c5303af37bad37fc7f4e86c

Headers

File Characteristics

Imports

user32

shell32

kernel32

gdi32

Exports

Exports

Sections

.text Size: 10KB - Virtual size: 9KB

.rdata Size: 3KB - Virtual size: 3KB

.data Size: 187KB - Virtual size: 186KB

.rsrc Size: 2KB - Virtual size: 1KB

.text
Size: 10KB - Virtual size: 9KB

.rdata
Size: 3KB - Virtual size: 3KB

.data
Size: 187KB - Virtual size: 186KB

.rsrc
Size: 2KB - Virtual size: 1KB