531d814b4e061f5f91e38fbd9a1abfad_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

531d814b4e061f5f91e38fbd9a1abfad_JaffaCakes118
Size

129KB
MD5

531d814b4e061f5f91e38fbd9a1abfad
SHA1

a210b28a32c6c337ea7b9604f485573c2e3b395d
SHA256

d280d7a6e84d36e27a7598d833a2cd310c6f3fc59f44e22ed76cd37bcfb056b3
SHA512

897de6d345ae40922b40943d0b7b54036c62e9d98a1dab14e082d93ca5adc4210d7e32d1d38a574b59fefbf8f34e864047983eceb5aab722a70d83433122bf26
SSDEEP

3072:X9P1+KtcQNgkwV1to1gaPHyZbX43YjDAsuCLWgL9AL:aQDgvto1gaPyB432z5L90

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
531d814b4e061f5f91e38fbd9a1abfad_JaffaCakes118

Files

531d814b4e061f5f91e38fbd9a1abfad_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2240972acd7a00266ecedd2ead483764

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrlenW
InitializeCriticalSection
ExitProcess
GetCurrentProcessId
LoadLibraryA
SetThreadLocale
LocalReAlloc
CreateEventA
GetFileType
LoadLibraryExA
GetModuleHandleW
SetErrorMode
GetStringTypeA
FreeLibrary
VirtualFree
lstrlenA
GetCurrentThread
GetThreadLocale
GetTickCount
VirtualAlloc
IsBadReadPtr
VirtualQuery
WideCharToMultiByte

user32

GetWindowThreadProcessId
GetMenuItemID
IsChild
SetScrollPos
GetDCEx
DrawEdge
DrawFrameControl
GetCursorPos
FillRect
GetIconInfo
SetScrollRange
GetSystemMenu
EmptyClipboard
GetKeyState
GetMenuState
GetKeyboardLayoutList
InvalidateRect
DrawMenuBar
PtInRect
CallWindowProcA
GetPropA
TranslateMessage
SetRect
IsWindowUnicode
IsWindowEnabled
ReleaseDC
AdjustWindowRectEx
TranslateMDISysAccel
SetMenu
DefWindowProcA
WindowFromPoint
GetClassNameA
OpenClipboard
CreateMenu
SetWindowLongW
SetMenuItemInfoA
InflateRect
PostMessageA
DestroyIcon
GetMenuItemCount
LoadIconA
MessageBeep
RedrawWindow
MessageBoxA
GetTopWindow
OffsetRect
RemovePropA
SetWindowsHookExA
CreateWindowExA
ReleaseCapture
IsRectEmpty
GetMenuStringA
MapWindowPoints
CharNextW
IsDialogMessageW
EndDialog
SetClassLongA
ShowScrollBar
UnregisterClassA
EnableWindow
GetMenu
PeekMessageW
ActivateKeyboardLayout
DispatchMessageW
KillTimer
GetWindowRect
GetDesktopWindow
SetWindowPos
GetKeyboardLayout
GetDC
EnableScrollBar
ScrollWindow
CheckMenuItem
InsertMenuItemA
DestroyWindow
GetFocus
ShowWindow
IsWindow
IsMenu
GetParent
IsIconic
CharNextA
DrawAnimatedRects
GetKeyboardLayoutNameA
GetKeyNameTextA
EqualRect
IsDialogMessageA
EnumThreadWindows
SetFocus
GetWindowLongW
ChildWindowFromPoint
ScreenToClient
DeleteMenu
GetClassInfoA
IsWindowVisible
GetClipboardData
RemoveMenu
CallNextHookEx
MapVirtualKeyA
GetWindowDC
LoadCursorA
SendMessageW
DispatchMessageA
PeekMessageA
GetForegroundWindow
CharLowerBuffA
DestroyCursor
GetSubMenu
SetTimer
SetPropA
ClientToScreen
GetLastActivePopup
IsCharLowerA

comdlg32

GetOpenFileNameA
FindTextA
ChooseColorA
GetSaveFileNameA

gdi32

SetBkColor
GetDIBColorTable
GetPaletteEntries
GetDCOrgEx
CreateDIBitmap
CreatePenIndirect
GetCurrentPositionEx
SaveDC
CreateBitmap

shlwapi

SHGetValueA

Exports

Exports

_qKT2nlpSfGvZJ@20
_7QoWgByOAgLa
cII49c
AMoGgQKc@12
_1MVV4

Sections

.text
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 113KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2240972acd7a00266ecedd2ead483764

Headers

File Characteristics

Imports

kernel32

user32

comdlg32

gdi32

shlwapi

Exports

Exports

Sections

.text Size: 9KB - Virtual size: 12KB

.rdata Size: 4KB - Virtual size: 96KB

.data Size: 113KB - Virtual size: 116KB

.rsrc Size: 1024B - Virtual size: 4KB

.text
Size: 9KB - Virtual size: 12KB

.rdata
Size: 4KB - Virtual size: 96KB

.data
Size: 113KB - Virtual size: 116KB

.rsrc
Size: 1024B - Virtual size: 4KB