f6b993ca49358ae5e6b6a8d8270d7b6b_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

f6b993ca49358ae5e6b6a8d8270d7b6b_JaffaCakes118
Size

72KB
MD5

f6b993ca49358ae5e6b6a8d8270d7b6b
SHA1

aee54db15b2bfd1fd0303c8889c47f814b2a71cf
SHA256

1c3278f7b6053c9a2e91db6764e8fb43baf09936e619546a73b8b14f33cc3200
SHA512

2ea952ebcd51d3926e1f892a721995db77db962adff7f9b47aa099a58258298a8650524468e4892325128b133dbfcfcfe2e1f7229cfb19dcd78ab2de3a7852e3
SSDEEP

1536:/2smFs/8abxWMXfUoRAGzOMp0VtwZLQ3vJHP:mGNHRAGb0wZLQ3vVP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f6b993ca49358ae5e6b6a8d8270d7b6b_JaffaCakes118

Files

f6b993ca49358ae5e6b6a8d8270d7b6b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

609a7c80d0cdaa27b7cf9a8a8ba800a3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReadConsoleA
DeleteFileW
ExitThread
GetLastError
ReadFile
DeleteAtom
CreateDirectoryA
GetCommandLineA
GetCPInfo
Sleep
GetFileTime
DeleteFileA
SetLastError
CopyFileA
OpenFileMappingA
OpenFile
CopyFileW
GetComputerNameA
WriteFile
FindAtomA

advapi32

RegCreateKeyExW
RegQueryInfoKeyW
RegLoadKeyA
RegQueryValueA
RegEnumKeyA
RegEnumKeyExA
RegQueryValueExA
RegDeleteKeyA
RegEnumValueW
RegDeleteValueA
RegQueryValueW
RegDeleteKeyW
RegDeleteValueW
RegEnumKeyW
RegOpenKeyExA
RegEnumKeyExW
RegLoadKeyW
RegFlushKey
RegQueryInfoKeyA

gdi32

AddFontMemResourceEx
CreateSolidBrush
GetPixel
GetPixel
ExcludeClipRect
CloseMetaFile
ClearBrushAttributes
CloseFigure
SetTextColor
AddFontResourceExW
GetBrushOrgEx
RestoreDC
CopyMetaFileA
DeleteObject
ClearBitmapAttributes
AddFontResourceExA
CancelDC
AbortPath
GetClipBox
BitBlt
AddFontResourceTracking

user32

GetDlgItem
EndDialog
CopyRect
GetCursor
DrawIconEx
GetWindowTextLengthA
GetDC
AlignRects
InsertMenuA
LoadCursorA
DialogBoxParamW
DialogBoxParamA
CopyIcon
AppendMenuW
GetMenu
CreateIcon
DrawTextA
CloseWindow
DrawTextW

comctl32

ImageList_Merge
ImageList_GetImageRect
ImageList_LoadImageA
ImageList_GetDragImage
ImageList_DragLeave
ImageList_LoadImage
ImageList_GetImageCount
ImageList_Destroy
ImageList_Read
ImageList_AddIcon
ImageList_DragEnter
ImageList_BeginDrag
ImageList_GetIcon
InitCommonControls
ImageList_GetImageInfo
ImageList_DragShowNolock
ImageList_DrawIndirect
ImageList_DragMove
ImageList_LoadImageW
ImageList_Copy
ImageList_Draw

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 62KB - Virtual size: 142KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 274B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

609a7c80d0cdaa27b7cf9a8a8ba800a3

Headers

File Characteristics

Imports

kernel32

advapi32

gdi32

user32

comctl32

Sections

.text Size: 5KB - Virtual size: 4KB

.rdata Size: 3KB - Virtual size: 2KB

.data Size: 62KB - Virtual size: 142KB

.reloc Size: - Virtual size: 1KB

.rsrc Size: 512B - Virtual size: 274B

.text
Size: 5KB - Virtual size: 4KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 62KB - Virtual size: 142KB

.reloc
Size: - Virtual size: 1KB

.rsrc
Size: 512B - Virtual size: 274B