40d1a4aedd2408a2a577fef6944e630d_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

40d1a4aedd2408a2a577fef6944e630d_JaffaCakes118
Size

128KB
MD5

40d1a4aedd2408a2a577fef6944e630d
SHA1

7acc8f0049bf781e15cb411e11018dcfd3847b7e
SHA256

6382dceef56187f570c5cb81c4f80f7259bafb76077f52dc115638105b2a8390
SHA512

c0970dc3b4485c4e9def0d4d78761bc2dfdee2e2f5feb551e3fdd1572b03179ad37c4e3d8b311718003eb7c9e8d4af4564af6920247a387f1d2ac1c2cb64693a
SSDEEP

3072:4yebJxqje0oGuOKIweccikgykh6hOfibi8jB0:fAJx/zIwhciwkh6hDb12

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
40d1a4aedd2408a2a577fef6944e630d_JaffaCakes118

Files

40d1a4aedd2408a2a577fef6944e630d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bebe4fd35ba729a37ab212b1c21645c5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comdlg32

GetFileTitleA
ChooseColorA
GetOpenFileNameA

msvcrt

sqrt
sprintf
tolower
memmove
_acmdln
memcpy

shlwapi

SHEnumValueA
SHDeleteKeyA
SHDeleteValueA
PathFileExistsA

oleaut32

SafeArrayCreate
SysFreeString
GetErrorInfo
SafeArrayUnaccessData
OleLoadPicture
VariantCopyInd
SysAllocStringLen

advapi32

RegEnumValueA
RegEnumKeyA
RegOpenKeyExA

comctl32

ImageList_Write
ImageList_Destroy
ImageList_DrawEx

ole32

StgCreateDocfileOnILockBytes
ReleaseStgMedium
CreateOleAdviseHolder
CoFreeUnusedLibraries

kernel32

ExitProcess
GetModuleHandleA
EnterCriticalSection
VirtualAllocEx
EnumCalendarInfoA
FindClose

gdi32

GetBkColor
LineTo
RestoreDC
CreateCompatibleBitmap

user32

GetKeyState
IsWindow
GetWindowTextLengthA
GetDlgItem
GetFocus
IsWindowEnabled
EnableWindow
GetWindow
GetIconInfo
GetForegroundWindow
DrawMenuBar

shell32

Shell_NotifyIconW
SHGetDiskFreeSpaceA

Exports

Exports

Nl194jL@8
iCuLZy_Nzvf@4
uqTRXgDNZ5@24
_9i9nzbOGK8uK@4
_A2GECFf17CwvO
OWWAXwWrv7vUo
_2Z3CIa@4
GOnV6ZnqLhY
OJxo72s
_ixBVIExXvyhxk
eQijg@4
_LflMB37Mt
eHfJnDWmcz
_k2ZIXTfqc
_6LkdCssC
j4RXrSg3nNaEZM@24
_Ck5BEF1Isf
_tKNSHANZPYL13
qGyxbwyju48ZT
hssx86ktpqQ@16
_fCDE3@12
O0AR1wK_TIlo6a@16
NJgt0MTChS
_q2F13P@4
JlZ66_q
mGmn2AU5kSSPz@8
C2edmG8IwVVor
_VOOYs2
_zIj9T
_Kvy3Eb@4
_sDbYwlNNZMX9@8
_eRJmvwIEDl1T@16
_VEe8hmJ5cWM@20
_PdYFNUrGa3f@12
_hdYLihkglY2P

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 108KB - Virtual size: 219KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data
.rdata
.rsrc/0/DIALOG/TEXTFILEDLG
.rsrc/0/MANIFEST/1
.xml
.rsrc/0/RCDATA/DVCLAL
.rsrc/0/STRING/4094
.rsrc/0/STRING/4095
.rsrc/1033/BITMAP/BBABORT.bmp
.rsrc/1033/version.txt
.text

Sharing

General

Malware Config

Signatures

Files

bebe4fd35ba729a37ab212b1c21645c5

Headers

File Characteristics

Imports

comdlg32

msvcrt

shlwapi

oleaut32

advapi32

comctl32

ole32

kernel32

gdi32

user32

shell32

Exports

Exports

Sections

.text Size: 11KB - Virtual size: 11KB

.rdata Size: 3KB - Virtual size: 2KB

.data Size: 108KB - Virtual size: 219KB

.rsrc Size: 5KB - Virtual size: 4KB

.text
Size: 11KB - Virtual size: 11KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 108KB - Virtual size: 219KB

.rsrc
Size: 5KB - Virtual size: 4KB