448b2bb8330a64998b729982aedd95fc_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

448b2bb8330a64998b729982aedd95fc_JaffaCakes118
Size

185KB
MD5

448b2bb8330a64998b729982aedd95fc
SHA1

eb09291ace71a8a75f876cf6a69ba11c3116ec3c
SHA256

b3b755849349c7c413be8c2d9b8aeeba489e17e613912e34f2fddae1c1ef5e08
SHA512

7faf17034da11dd46935d8c80d11ce3de1001b2b2bf0eaa78fe1ce9327f330b276f2c76d0e9536dfad695ce5b8f6666d1d73ffbed8ccb6cb5b75c19b51edc5ff
SSDEEP

3072:Op8xHi5ZFqQyvJbpoYdlKXBpa6KGW8vHRhzXgPfZposlxGWEkgb2/TfIjxYRFfDq:MWi5Y4O2BhKQ5hz8lxGW/TgjxYje

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
448b2bb8330a64998b729982aedd95fc_JaffaCakes118

Files

448b2bb8330a64998b729982aedd95fc_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9e3ab9a49ae9fee84813ed5f724e1772

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

user32

GetSysColorBrush
SetScrollRange
DestroyIcon
WinHelpW
SetWindowPos
DefWindowProcW
SetWindowsHookExW
SetClipboardData
RegisterClassW
ClipCursor
DestroyCursor
IsClipboardFormatAvailable
ToAscii
EmptyClipboard
MonitorFromWindow
DrawEdge
ChildWindowFromPoint
UnhookWindowsHookEx
CallNextHookEx
GetSysColor

shlwapi

PathStripToRootW
PathIsRootW
PathIsURLW
PathIsRelativeW
PathCanonicalizeW
PathCombineW

kernel32

GetFileAttributesA
LockFile
CreateFiber
VerLanguageNameW
FileTimeToLocalFileTime
SearchPathW
GetSystemTime
SetCommConfig
GetUserDefaultLangID
GetFileType
EnumResourceNamesW
GetProfileStringW
IsDBCSLeadByte
FileTimeToSystemTime
GetVolumeInformationW
FindResourceExA
FlushFileBuffers
SetEndOfFile
GetFileTime
CompareStringW
LocalAlloc
FlushFileBuffers
UnlockFile
GetVersionExW
GetSystemDirectoryW

rpcrt4

RpcStringBindingComposeA
RpcBindingSetAuthInfoA
NdrClientCall
RpcBindingFromStringBindingA
RpcStringFreeA

ole32

RegisterDragDrop
GetHGlobalFromStream
ReleaseStgMedium
CoCreateInstance
StgCreateDocfileOnILockBytes
OleRun
StgOpenStorageOnILockBytes
GetHGlobalFromILockBytes
CoGetMalloc
CoTaskMemAlloc
OleGetAutoConvert
CLSIDFromString
CreateStreamOnHGlobal
StringFromCLSID
OleRegGetUserType
CoTaskMemFree
CLSIDFromProgID
CoFreeUnusedLibraries
OleDuplicateData
CoGetClassObject
CoCreateGuid
RevokeDragDrop
ProgIDFromCLSID
CreateILockBytesOnHGlobal

comdlg32

GetFileTitleA

comctl32

ImageList_Add
ImageList_DrawEx
ImageList_Create
ImageList_GetIconSize
ImageList_Destroy

gdi32

GetBkColor
PlgBlt
FlattenPath
AnimatePalette
StrokePath
CreatePen
GetPath
ExtCreatePen
PolyBezier
CreateFontIndirectA
SetStretchBltMode
RoundRect
SetTextColor
GetBitmapBits
SetDIBits

Sections

.text
Size: 161KB - Virtual size: 161KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.lib
Size: 512B - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9e3ab9a49ae9fee84813ed5f724e1772

Headers

File Characteristics

Imports

user32

shlwapi

kernel32

rpcrt4

ole32

comdlg32

comctl32

gdi32

Sections

.text Size: 161KB - Virtual size: 161KB

.rdata Size: 3KB - Virtual size: 2KB

.data Size: 19KB - Virtual size: 19KB

.lib Size: 512B - Virtual size: 76KB

.text
Size: 161KB - Virtual size: 161KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 19KB - Virtual size: 19KB

.lib
Size: 512B - Virtual size: 76KB