30c548f76ef9e7361f9e0149750005c3_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

30c548f76ef9e7361f9e0149750005c3_JaffaCakes118
Size

169KB
MD5

30c548f76ef9e7361f9e0149750005c3
SHA1

63a5afa41df1c02050a0338f624599907ebb1c80
SHA256

8f11a5bfbcf8a35a277e60df78e0b9c61b0c47b587022f38edac69fa44532763
SHA512

ba9e8b1c969b1202510483550307c7ee8b1dce8abfe9ff855df91b4524bbc9dae4f0b8b216037c1d6b58b05f714b0f629c11a235d9b3894ffd5e66831862b921
SSDEEP

3072:z2neztFrSox2xkYo1+J0FqNAqhfeM7s8Ru2:zceF1GkWJ0FDqhfC8RJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
30c548f76ef9e7361f9e0149750005c3_JaffaCakes118

Files

30c548f76ef9e7361f9e0149750005c3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

fda9f44ffe2385f07df2f421ec548296

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

msvcrt

wcscspn
sprintf
memset
srand
clock
memmove
sqrt
time

oleaut32

SafeArrayCreate
SafeArrayPtrOfIndex
SafeArrayGetElement
VariantChangeType
SysStringLen

version

GetFileVersionInfoSizeA

user32

IsWindowEnabled
IsRectEmpty
EnumThreadWindows
EnableMenuItem
WindowFromPoint
CharLowerBuffA
RedrawWindow
TrackPopupMenu
GetSysColor
GetSystemMenu
PtInRect
DrawMenuBar
GetMenuItemCount
CreateIcon
IsWindowVisible
DrawFrameControl
RegisterClipboardFormatA
CreatePopupMenu
GetTopWindow
DestroyMenu
GetWindowLongA
RegisterWindowMessageA
DestroyCursor
GetClassLongA
ScrollWindow
IsDialogMessageA
FrameRect
PeekMessageW
SetMenuItemInfoA
GetClientRect
CloseClipboard
EmptyClipboard
GetCapture
SetMenu
CheckMenuItem
SetCursor
RemoveMenu
GetParent
SetScrollPos
RemovePropA
FillRect
GetScrollPos
CharLowerA
CharNextA
GetForegroundWindow
GetLastActivePopup
SetRect
IsCharLowerA
DrawTextA
GetCursorPos
GetWindowPlacement
EnumWindows
DrawIcon
IntersectRect
GetScrollRange
GetDCEx
LoadIconA
GetKeyboardState
EndPaint
GetFocus
GetWindowThreadProcessId
RegisterClassA
GetClassInfoA
LoadStringA
IsZoomed
OpenClipboard
CharUpperBuffA
InsertMenuA
DrawAnimatedRects
OemToCharA
EnumChildWindows
DrawEdge
SetParent
DeleteMenu
SendMessageA
GetMenuItemInfoA
GetScrollInfo
GetWindowDC
GetWindowRect
MapVirtualKeyA
SetWindowPos
CharNextW
GetClipboardData
SetWindowLongA
KillTimer
GetWindowLongW
EqualRect
GetWindowTextLengthA
LoadBitmapA
PostMessageA
IsWindow
GetWindow
UpdateWindow
GetCursor
GetMenuStringA
GetKeyState
UnhookWindowsHookEx
GetDesktopWindow
AdjustWindowRectEx
GetDC
GetIconInfo
GetWindowTextA
SetClipboardData
PostQuitMessage
SetWindowTextA
IsCharUpperA
CharUpperA
MsgWaitForMultipleObjects
wsprintfA
ClientToScreen
GetSysColorBrush
GetClassNameA
DefWindowProcA
SetScrollRange
CreateMenu

advapi32

RegEnumValueA

kernel32

GetLastError
lstrlenA
GetCurrentProcessId
GetACP
VirtualAlloc
GetCommandLineW
GetCPInfo

shlwapi

PathGetCharTypeA
SHDeleteValueA
SHQueryInfoKeyA
SHSetValueA

comctl32

ImageList_Add
ImageList_Write
ImageList_Read

ole32

CreateStreamOnHGlobal
CoCreateGuid
CoFreeUnusedLibraries
CLSIDFromProgID
StringFromIID
CoDisconnectObject

comdlg32

GetFileTitleA

gdi32

SetBkColor
GetCurrentPositionEx
CreateCompatibleDC
CreateCompatibleBitmap
SetTextColor

Exports

Exports

_Qtd@20
_Uuq

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 137KB - Virtual size: 204KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 424B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 719B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fda9f44ffe2385f07df2f421ec548296

Headers

File Characteristics

Imports

msvcrt

oleaut32

version

user32

advapi32

kernel32

shlwapi

comctl32

ole32

comdlg32

gdi32

Exports

Exports

Sections

.text Size: 9KB - Virtual size: 9KB

.data Size: 137KB - Virtual size: 204KB

.tls Size: 512B - Virtual size: 424B

.rdata Size: 1024B - Virtual size: 719B

.idata Size: 4KB - Virtual size: 4KB

.rsrc Size: 15KB - Virtual size: 15KB

.text
Size: 9KB - Virtual size: 9KB

.data
Size: 137KB - Virtual size: 204KB

.tls
Size: 512B - Virtual size: 424B

.rdata
Size: 1024B - Virtual size: 719B

.idata
Size: 4KB - Virtual size: 4KB

.rsrc
Size: 15KB - Virtual size: 15KB