37967ba44e377bf383060738917471b5_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

37967ba44e377bf383060738917471b5_JaffaCakes118
Size

66KB
MD5

37967ba44e377bf383060738917471b5
SHA1

08cb7cc4753e877636ceb0a07746ecc5e4aeb8da
SHA256

9cb1c40e2895ed31ddf84be6be358d7c93cccc8678bf42638804562fb084a28e
SHA512

7d829e4348db29f3db9eca0c9504e76e5f2345423e11baa78f6aa04e1a96d007c739e257b32d8f5e919e88a541c5be93af571a96b8da7334156130dc79b371ee
SSDEEP

768:Vi7LZZ0i4fshf0hM7KXW+ekxLx5E+5dw9r47bWAtx/Yj60qyDpVXcrQVFnjOqE7L:snZaW+XBnd/x5dw9etx/YjOO/srQT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
37967ba44e377bf383060738917471b5_JaffaCakes118

Files

37967ba44e377bf383060738917471b5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7c3b37f57074cddcd23a69f5655d01d8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

RegisterClassExW
SendMessageW
ModifyMenuW
SetWindowTextW
GetWindowTextW
UpdateWindow
TranslateAcceleratorA
ShowWindowAsync
SetWindowTextA
wsprintfA
SetMenuDefaultItem
SetDlgItemTextA
SetDebugErrorLevel
SendMessageA
SendInput
RemovePropA
PostThreadMessageA
MessageBoxA
LoadIconA
LoadCursorA
IsWindowUnicode
GetWindowLongA
GetWindowDC
GetSysColor
GetMenuState
GetKeyboardLayout
GetFocus
GetDlgItem
GetDlgCtrlID
GetCursor
GetClientRect
EndDialog
EnableWindow
DialogBoxParamA
DefWindowProcA
CreateWindowExA
CreateMenu
BringWindowToTop

kernel32

lstrlenA
lstrcpynA
lstrcpyA
lstrcmpA
lstrcatA
_lclose
WaitForSingleObject
Sleep
SizeofResource
OpenMutexA
MulDiv
LocalCompact
LoadLibraryExA
HeapFree
HeapAlloc
GlobalFree
GlobalFindAtomA
GlobalAlloc
GetWindowsDirectoryA
GetVersion
GetThreadPriority
GetTapeParameters
GetProcAddress
GetModuleHandleA
GetLastError
GetFileTime
GetExitCodeThread
GetDateFormatA
GetCommandLineA
FindResourceA
FatalExit
ExitThread
ExitProcess
DeleteFiber
CreateThread
CreateFileA
CloseHandle
SleepEx
OpenFile
WriteFile
GetStdHandle
FindFirstFileA
FindClose
ReadFile

comctl32

ord17

shell32

ExtractIconExA
ExtractIconA
DragQueryPoint
DragQueryFileA

advapi32

RegOpenKeyExA
GetTokenInformation

gdi32

SetBitmapDimensionEx
DeleteObject

ntdll

NtPlugPlayControl
NtWaitForMultipleObjects
RtlAssert
ZwAddAtom
ZwCancelTimer
NtCloseObjectAuditAlarm

Sections

.text
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 128KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

CODE_SEG
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 584B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7c3b37f57074cddcd23a69f5655d01d8

Headers

File Characteristics

Imports

user32

kernel32

comctl32

shell32

advapi32

gdi32

ntdll

Sections

.text Size: 42KB - Virtual size: 41KB

.rdata Size: 6KB - Virtual size: 6KB

.data Size: 3KB - Virtual size: 128KB

CODE_SEG Size: 12KB - Virtual size: 11KB

.rsrc Size: 1024B - Virtual size: 584B

.text
Size: 42KB - Virtual size: 41KB

.rdata
Size: 6KB - Virtual size: 6KB

.data
Size: 3KB - Virtual size: 128KB

CODE_SEG
Size: 12KB - Virtual size: 11KB

.rsrc
Size: 1024B - Virtual size: 584B