36a212a972294ce8646fba74743747eb_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

36a212a972294ce8646fba74743747eb_JaffaCakes118
Size

249KB
MD5

36a212a972294ce8646fba74743747eb
SHA1

cd2bfe3d0fbcdd0fb3199d68edc636a264343c13
SHA256

cc95915cecb4becd93c0e74303667ea2da2efb5c13817744a12307bef14182e0
SHA512

02fa6aa1a7fbb4b1902f3f038a957abf520ed3567c0d3e05c3ef13536dafac418dd5900e1b2d15c664e80890e87160e83940d0c7f594f1b400eb0efdd7140643
SSDEEP

6144:grKLIh1Eyy8zfrkUQSHp+z5E+bGzleQDnEt:gmLE1/y0zkUaydDnEt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
36a212a972294ce8646fba74743747eb_JaffaCakes118

Files

36a212a972294ce8646fba74743747eb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ee605e976187f0333a418943dcd5ad36

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameW
GetLastError
GetTickCount
GetCurrentProcess
MultiByteToWideChar
GetSystemDirectoryW
GetVersionExA
GetProcessHeap
GetStartupInfoW
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetModuleHandleA
TlsAlloc
GetCurrentThreadId
HeapCreate
ExitProcess
GetModuleFileNameA
GetEnvironmentStringsW
GetStartupInfoA
QueryPerformanceCounter
GetCurrentProcessId
GetStringTypeA
GetStringTypeW
Sleep
GetLocaleInfoA
InitializeCriticalSection
LoadLibraryA
lstrcmpW
GetProcAddress

user32

GetSystemMetrics
LoadMenuIndirectA
GetMenuItemID
SendDlgItemMessageW
OffsetRect
LoadImageA
ActivateKeyboardLayout
CreateAcceleratorTableW
SetWindowPos
LoadImageW
CopyRect
CreateWindowExA
SetWindowTextW
SendDlgItemMessageA
GetMenuStringA
GetMenuItemInfoW
GetMenuState
GetIconInfo
LoadMenuIndirectW
SetWindowTextA
GetClassInfoExW
CheckMenuItem
GetMenuStringW
GetActiveWindow
GetForegroundWindow
InsertMenuItemW
CharLowerW
mouse_event
SetFocus
RegisterClassExA
SetCursor
IsIconic

advapi32

RegSetValueExW
RegCloseKey
RegCreateKeyExW
RegOpenKeyExW
RegDeleteKeyW
CloseServiceHandle
StartServiceW
OpenServiceW
OpenSCManagerW

resutils

ResUtilSetPropertyTable
ResUtilSetResourceServiceEnvironment
ResUtilGetProperties
ResUtilEnumResources
ResUtilSetSzValue
ResUtilGetSzProperty
ResUtilSetMultiSzValue
ResUtilDupString
ResUtilFindBinaryProperty

gdi32

CreateRoundRectRgn
CreateFontW
AddFontResourceW
GetEnhMetaFileA
AddFontResourceA
CreateDIBPatternBrushPt
GetTextExtentPointW

kbdca

KbdLayerDescriptor

Sections

.text
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.l
Size: 1024B - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 87KB - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 130KB - Virtual size: 159KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ee605e976187f0333a418943dcd5ad36

Headers

File Characteristics

Imports

kernel32

user32

advapi32

resutils

gdi32

kbdca

Sections

.text Size: 17KB - Virtual size: 16KB

.rdata Size: 3KB - Virtual size: 51KB

.l Size: 1024B - Virtual size: 70KB

.edata Size: 87KB - Virtual size: 104KB

.data Size: 7KB - Virtual size: 92KB

.edata Size: 130KB - Virtual size: 159KB

.rsrc Size: 2KB - Virtual size: 1KB

.text
Size: 17KB - Virtual size: 16KB

.rdata
Size: 3KB - Virtual size: 51KB

.l
Size: 1024B - Virtual size: 70KB

.edata
Size: 87KB - Virtual size: 104KB

.data
Size: 7KB - Virtual size: 92KB

.edata
Size: 130KB - Virtual size: 159KB

.rsrc
Size: 2KB - Virtual size: 1KB