915b9184cad619c63becf0c5a34317be_JaffaCakes118

resource
915b9184cad619c63becf0c5a34317be_JaffaCakes118

IMPHASH b34f154ec913d2d2c435cbd644e91687
SHA256 741db00e8f375135a8e06646bf03ce811907e9e2467141fe6896b421a3ee8918
MD5 915b9184cad619c63becf0c5a34317be
SHA1 1badc9b68b0991beabaa07a1652442d31bd1e2f5
SHA512 28909b980377f9cda54b2927c357be192c809efe6e2dfb877dce45aab5dc76f13ce822df136bd5c9c0d074e3980d8f5dbaf1b129f8c4d2d8927ceff3345a462f
SSDEEP 1536:Z+aQc1w4vuFvJhEem+be0Dy6Ltaufo1EFInFfZWdEgVUQS/2Wd/IYVQuEoki7y:Ea77v0JhE4Dy6LtauiFfodEgOpeWdy
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

13199

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetEnvironmentVariableW SetFileAttributesW Sleep GetTickCount GetFileSize GetModuleFileNameW GetCurrentProcess CopyFileW SetCurrentDirectoryW GetFileAttributesW GetWindowsDirectoryW GetTempPathW GetCommandLineW GetVersion SetErrorMode lstrlenW lstrcpynW GetDiskFreeSpaceW ExitProcess GetShortPathNameW CreateThread GetLastError CreateDirectoryW CreateProcessW RemoveDirectoryW lstrcmpiA CreateFileW GetTempFileNameW WriteFile lstrcpyA MoveFileExW lstrcatW GetSystemDirectoryW GetProcAddress GetModuleHandleA GetExitCodeProcess WaitForSingleObject lstrcmpiW MoveFileW GetFullPathNameW SetFileTime SearchPathW CompareFileTime lstrcmpW CloseHandle ExpandEnvironmentStringsW GlobalFree GlobalLock GlobalUnlock GlobalAlloc FindFirstFileW FindNextFileW DeleteFileW SetFilePointer ReadFile FindClose lstrlenA MulDiv MultiByteToWideChar WideCharToMultiByte GetPrivateProfileStringW WritePrivateProfileStringW FreeLibrary LoadLibraryExW GetModuleHandleW

user32

GetSystemMenu SetClassLongW EnableMenuItem IsWindowEnabled SetWindowPos GetSysColor GetWindowLongW SetCursor LoadCursorW CheckDlgButton GetMessagePos LoadBitmapW CallWindowProcW IsWindowVisible CloseClipboard SetClipboardData EmptyClipboard OpenClipboard ScreenToClient GetWindowRect GetDlgItem GetSystemMetrics SetDlgItemTextW GetDlgItemTextW MessageBoxIndirectW CharPrevW CharNextA wsprintfA DispatchMessageW PeekMessageW ReleaseDC EnableWindow InvalidateRect SendMessageW DefWindowProcW BeginPaint GetClientRect FillRect DrawTextW EndDialog RegisterClassW SystemParametersInfoW CreateWindowExW GetClassInfoW DialogBoxParamW CharNextW ExitWindowsEx DestroyWindow GetDC SetTimer SetWindowTextW LoadImageW SetForegroundWindow ShowWindow IsWindow SetWindowLongW FindWindowExW TrackPopupMenu AppendMenuW CreatePopupMenu EndPaint CreateDialogParamW SendMessageTimeoutW wsprintfW PostQuitMessage

gdi32

SelectObject SetBkMode CreateFontIndirectW SetTextColor DeleteObject GetDeviceCaps CreateBrushIndirect SetBkColor

shell32

SHGetSpecialFolderLocation ShellExecuteExW SHGetPathFromIDListW SHBrowseForFolderW SHGetFileInfoW SHFileOperationW

advapi32

AdjustTokenPrivileges RegCreateKeyExW RegOpenKeyExW SetFileSecurityW OpenProcessToken LookupPrivilegeValueW RegEnumValueW RegDeleteKeyW RegDeleteValueW RegCloseKey RegSetValueExW RegQueryValueExW RegEnumKeyW

comctl32

ImageList_Create ImageList_AddMasked ImageList_Destroy ord17

ole32

OleUninitialize OleInitialize CoTaskMemFree CoCreateInstance

.data

SHA256 e2835b9de081782fa567c22333052e11d1632bff5697c817ae031f3201cd77da
MD5 db8f31a08a2242d80c29e1f9500c6527
SHA1 bdd9e7400edf5b4fddcffb66fcb1d3d83c8901da
SHA512 2483e5e156b821dab9605f8efe9dd490363caf4a4fcf4c340d43e59cd5082ed7b45d2838791f5fd935819655b34fe6bf5d806f257f1e84cdc2dcb6232985544c
MD5 SHA1 SHA512

.rdata

SHA256 d24bd8dac0eb0a93bf87e6f181071c5fe53f0172274aca40170b2f262b484a0c
MD5 966a3835fd2d9407261ae78460c26dcc
SHA1 fc99c0fed038281332bd1f0f6d0122c042664860
SHA512 42e56ef80aef65f4d73c19e9c0ed76d5326dd655d64937d7c92025bdc78ce5370ca4e00034b5c71acadcbcb136a531848944711708d1c29dda0f5b6f8b335af9
SSDEEP 96:BSbR9ZhYMl8xCav/oms7SbR9ZeiYxBtY2rDoDPhxyPYPkyfRJalT2J:8bRjhYLzop2bRje/tY4cDLyPYdRa2
MD5 SHA1 SHA512 SSDEEP

.rsrc/DIALOG/105

SHA256 425b8270f7ca42a927eae6bea468acf414a3e4b58b5ba2c56aaae4d1b2c11014
MD5 386770584473e271f23dced36427f4ff
SHA1 d14ce95f784b35e4e3ebee535476ebcd3e380c19
SHA512 e7bd459dc14642e2222477a05694db86e526c90333a6e0e711c91a8d5893036c09a27f75855d2b416f3da4ecb59e7a466d82b7cb7abdd56f6dabb040da34c1f3
MD5 SHA1 SHA512

.rsrc/DIALOG/106

SHA256 4a55bd714f5d50cd8eabba10e57f0618f1842717dcfa582d73a917b1933cd1d4
MD5 fa83652660409e90e0db9731ad2adb17
SHA1 0a8f0af67723c87fe26ccf676b8e19ec6357b4dc
SHA512 d97885f9c2846a042ec3c0d01a756d22fda7a989d55cd61efbc945abcdcfd74ca0284c745cf8bebf2d2fab82718f7b57ab0b701f67d2319ca6b5f55bce663c07
MD5 SHA1 SHA512

.rsrc/DIALOG/111

SHA256 cb3c86cbcb579244a6f819f9c1807a7e89b6e600982ec6ea0841fcdcb16a9efd
MD5 663040d6315b1d6ce8c0334d182ed8fc
SHA1 ebcfff801a12fb8ad1200a4526fca8bd2c3e96cf
SHA512 a6a4dd7641083e24e09ff1e851e26b191a46f623705098777baf0784003637577417330e78df6bdd28efc98d0cb9edd1d259cb78327946eae5e7a5117d13445f
MD5 SHA1 SHA512

.rsrc/DIALOG/205

SHA256 1382f1e9260b7e203ceafc6936ef1dae48898fcf8fb04a446cd27a4384bc40c3
MD5 2c1f44c0a248a53a50a661eb9a65cdcf
SHA1 69a0418cac4aaa30203faa1f0bdbe74fe1cc29c6
SHA512 01a5249482c5f683e5460eb484cf0d0aea8bcf2d0cfbb20ed0f321721e722fab02be03f2b859202bf6df02d77423845e87e52e37e087a490e44f10eb9af96488
MD5 SHA1 SHA512

.rsrc/DIALOG/206

SHA256 012557f58e68234d4a88df0b713c59800f798ecce19dfd589d326b458dddcbd8
MD5 c7239ce55362dabbe3887e5fc4bdf5fe
SHA1 a2908207ffb889a12da3cbdbe7446e04b254e7ed
SHA512 b2e9435303e7c737ca32045a24c42e47166a068852a464823d90aa7e4a16609c7653a004c3e73b8bfdba8d6d5548f372ffb0e6baf25aa277b2696f16b78f13a0
MD5 SHA1 SHA512

.rsrc/DIALOG/211

SHA256 8c64a2341dc473a7d8ab4956af589e9a7257c4f05a8dc229f862c16d49ba37e5
MD5 30dab3583979c2008e8de9295ab7c36b
SHA1 186cd9560b358bbf8b523d1050573f22bb00264d
SHA512 a5d8d56c8cb7bd6dd5c5e71700cdc50c02a9ace1b30d51392a7ca9c7afbe3d2a291ef1b127d5070bd12b7431237588e0a3de170b7d103e38b88e9a2665d5320d
MD5 SHA1 SHA512

.rsrc/DIALOG/305

SHA256 d542230218a67392c3e8d2c61f29f66f8724d837e83e9c0a49f30bdf02d722d7
MD5 1cdff3870b4510f9c4a40874187787a2
SHA1 a7a0949b603bcbf6fdfe4a68eeba4c06cfda442b
SHA512 aadcd63715dbe9bb0dfb922cfc7c9e91287ee702bfd99b691e63cde1345a482e11fa1c017f8a1ee25aa6a04a1be5a4f17b022e93c916ce33442edf831d535f61
MD5 SHA1 SHA512

.rsrc/DIALOG/306

SHA256 ab1e3ad5b5d87630cb0f6a6671c10fe49d9c33839be0d5daeba89ec053dda92c
MD5 cc0021533c65b44747600689ff5fbd43
SHA1 b1d1e4594f5ad7b08d56a25cdbe6d9b9378e482b
SHA512 20ada8e52899a9c5fe8021d96afb78dc9fa6cc01694968a5d85cb1e942c33b7575f1e803ca72b58bfa15ce197bbf4435dd91478da4b6cc48c3288472e9398c7a
MD5 SHA1 SHA512

.rsrc/DIALOG/311

SHA256 4677979c1665998318fcb65b9a0c0b3dd9204c12dbddbd5e76df8822ed6e347a
MD5 408a7443d8f432b28a248059d8669d1c
SHA1 c199828e8051a2825b1d5e216360eb57cd0b37f7
SHA512 fca4f9c004afc87753d832e904492b25b18b57f7c326653b6c805fb01aa09f1fcc730e81b1452f159856737fdfb35f5aa24364574603d4a16abc5eed84b1198a
MD5 SHA1 SHA512

.rsrc/DIALOG/405

SHA256 349420ba5b5de0b0081e96a686c826e0f409f2f3413f2e9fb7e6f71cb544c325
MD5 c0c4f9be63c9d286b8d1265977ac9d86
SHA1 f9c0d915ded3ea188f342d0e5341e67701eed813
SHA512 c68d19d71f58221e6ed433d4733b2a8ba4d2411557a824c506de162def8b3a3913d1e2840576d81afe5afc0b1e6767d79b7df51d165d0d7cb87d60841daf1024
MD5 SHA1 SHA512

.rsrc/DIALOG/406

SHA256 1a39a3aabdee2aa68c507c55ff37c38722b05b7f8bde66185a2462792381d8cd
MD5 8c69d2c81dd2d9050d0fa94df90ff16b
SHA1 cd71d904da747d7141e5abdde9363f7e240b26bd
SHA512 c07f491b5728a24aea2669ae0680801a1c3bc89ca9c9272b33609abcaf1f85005346ef3f7f997a314bf465ca0d4d6a05074ee4071324c77472bcbf083d58e77d
MD5 SHA1 SHA512

.rsrc/DIALOG/411

SHA256 a10617b39293152a65ad5c91ca4f35135845c7b785e3a582e58f6c8229045b85
MD5 2497a44fff8b76b5129662b60a617c85
SHA1 f73bd7c9caa4c1f7a0e4840d69b0accdc6d167a0
SHA512 894e1d89007a8236dbf9042f6791143ab4c0502f914ab99304024adb73214cadbb253cc24fd6cf85e59b71de13237c855f991c60390a87760661d82c0fea1cb4
MD5 SHA1 SHA512

.rsrc/DIALOG/505

SHA256 ab979c8f6052af662e37a55c3aa42a884f0ce537317ce85f25d6c2307eb198f5
MD5 0af4d59488d775d20c2e6725f3ed95a9
SHA1 f7c55407fa28f7d3eb8f6a4d4b988947f57c4c4a
SHA512 34088f447a1c93cf700fa67da1cfd578583600d9cdf4b20886b7e9ddc1adaf8897dc2668a334ec7690da0a769fe8b41facf64b86e83ed2fadc0b2468974c02f0
MD5 SHA1 SHA512

.rsrc/DIALOG/506

SHA256 6e7bca0054a1785929747807906d8527c2c2a231ca5975d8ebb3a3f98353f129
MD5 c33758ab32a791644973dfd60cbf6034
SHA1 ee7eb0a27279d39a959f5d35b6dfd4c18c7123fa
SHA512 ec42913633e0b982328284ece5501e20785713ee008cc26e889361afde747b2c4f37cff4f885590d504c01ec30ccb6f9a06d2e1d5cc2a06a4955939cdb4dbea3
MD5 SHA1 SHA512

.rsrc/DIALOG/511

SHA256 65fb71b054977a55435f45bbcddddedaa1e1cf43fdd9fc230938d625c3f7edcd
MD5 2802ee53bc08ac9a2cfaed81b3d79d05
SHA1 b7faac6a14545ea9c03651f69ae27cce0e62b010
SHA512 a0e35b51473d2f37674b631ca41724ab36a1eeeddc1adbe23c57f6841b7ab9ecab81308e92f5a53275fba90f399048b02ca9617d41352cb31b337e9e3c41f2a2
MD5 SHA1 SHA512

.rsrc/DIALOG/605

SHA256 699e0b19b7a5592c6cd94847130b28d57bf86ea61019043b9a6a3c88e6debc3d
MD5 16e4e392aaffaa0ee7e77b5be867e10f
SHA1 f7f681d8ec7c8a1aaa98b7a1d6bf14cfe730bbec
SHA512 ebc55aff872b81b8f7a71842717c86c551ce9453b8fdafb42222cde8b1d82be16c47ce3ff940a4945a91bb8b32a8a48a6c24202329b09a97f5bad0c303602b87
MD5 SHA1 SHA512

.rsrc/DIALOG/606

SHA256 184073a317c843cbe92b68cfacebcf5d73dedb538b3f79c048090f3ee5b614ff
MD5 1ffe62afd7fe045c34a23ea5c9c7eb22
SHA1 ac211007f1f7a65d868d6e9e658d5ff26dec9c8e
SHA512 91575bff336f773a11a95f522c5963573a523e790893c5e59ecb477bb054d6bcb9d1557c4b8e45e832c0e7669defa70d66228ff5fcda424a489faaf0efd27e3e
MD5 SHA1 SHA512

.rsrc/DIALOG/611

SHA256 0fd40b240b9df8f2dece8947dabbebce898f12becca8e196136e4231efba2dc1
MD5 7ce8a17102daebb8d864cd1063e987d1
SHA1 072345a235d4947d36b53fd47da68e7e6a93fe62
SHA512 ef6bb3aed0c38614f30ea975538d5de640ac38ae3f99f8496fb6fceb98eaef9b6ff607d5cb36fc94ab12790b113216b332fa7f9449513aa8c6f8a334fa911e60
MD5 SHA1 SHA512

.rsrc/GROUP_ICON/103

SHA256 422c345d78ee6650808b358082580c50332e82a24b1cf2e0c17c69a38cfcab54
MD5 b8d499d84f617a8777bd9185f80b6006
SHA1 c28ad16e94149019bdee891bb523fa39c225a1b3
SHA512 8b30796eb9ce485acceef0fc6f35ed7cae975f41b2fd890333d6dfc081146258114eed0e11ebd5ea01db57c57d8c9ce2b105eed17c9e8fcca20d11a4adcc0f5d
MD5 SHA1 SHA512

.rsrc/ICON/1

SHA256 bbe5207366303856b4d00a6bd8676bb68df604924e512fb68d67819c6e25a1fc
MD5 5f77a06b4866f72bf4a5810f9a75fb75
SHA1 3799668bc1fc56751ebcb96fb2e254f279f2b4f5
SHA512 e0ecb6baf90d5595268535144380c83110bdc0026df873ceb700b1247a29841ce84e8543fe82089e829af9fac428461c65cf6ba81baa4f360328ead1566609ae
SSDEEP 768:T1E/d/AnFfZWdETRC7Vc8UEKSvZS/2gvx2Ma6Q8gQI4wf:T1EFInFfZWdEgVUQS/2Wd/If
MD5 SHA1 SHA512 SSDEEP

.rsrc/ICON/2.ico

SHA256 864c2f7c8dbaec87fd54b6a3063a5b744028c8a9339b44ed47c25eec672ac8bb
MD5 740258dde5c491f1827cc7297ae1e520
SHA1 daa3a0bcf6cdaadf8ef1a4e32872c451461391c2
SHA512 e8d546fdfcd516a9919312759c84ad4cfc94972c908bb229411dd6747535d3ae64f6a1a3a5ffa4677908951a8ac26a474cd2087e6a2f9c7d3d069a57b9b826b4
SSDEEP 96:hX3o+nJdzg8Yge+dqw/RXje3cFUvf6tfRiOSH8XMMrKYEMv:hnRJdfRe+rde3OxtJdc8XMMO
MD5 SHA1 SHA512 SSDEEP

.rsrc/ICON/3.ico

SHA256 3d5f2e01c9323647738cc8663f42e557bf7542be0b8f39b181954ba2da3b2cfe
MD5 a09cda8003948927a84ad3397bcef739
SHA1 23d69ae460657ef51a095d16be8a5f421726308a
SHA512 ced1e1092c56649aa15f3abd4c4af1e773d26731a279e8fa0a3d8ab278a4731be63a8cbf2b2b0ef61be52717d25775f60a7d6e19f8eee7be2578e62ff9495960
SSDEEP 48:t3CAHYYo6M+5ZElmM3pVOFMpiZkfVtcccT:tSA4YoXHgefV
MD5 SHA1 SHA512 SSDEEP

.rsrc/ICON/4.ico

SHA256 75c76c1675200ff0c3785dac067aea46da2bff0db55466f155ed6533e8fd1c3a
MD5 7dece58e85820f811d22c9df916d313b
SHA1 81ad2a7b7545e7e425485b18abb3888b25167f47
SHA512 6921d1e36ad09570574f57469afc773b6462406058c4136fe249d05e7b155e53efe33a56bafb56c0b5f457c0b2d7109a5f13d31095699cad490ce7635ec8d251
MD5 SHA1 SHA512

.rsrc/MANIFEST/1

SHA256 a5fc3f7a73bef6e0a80ba01f794cf75f7142a4a31c2f36a85eb52658eb9ab4e3
MD5 5a6f57ab2524a75ba9444a71fef43b16
SHA1 ea224ad83cff4d425f3b9535d3a3bf19dfa7671d
SHA512 14709612d804d210d2f670ed5e134f7154a85a98e5943b6e08acef8bc5b895d219b0a9558aaeaa4f6e605b89866c23344b98b5c0284a6e7a72d91c06a0e9be97
MD5 SHA1 SHA512

.rsrc/version.txt

SHA256 06062e58b386614cd27263986b3524781c0e1ffc9ed9e8169ceac0a4b46a91c8
MD5 0e11116c1cd78300e15527732a04434b
SHA1 da098f0bc43530836e011aae75d2be4db1486d9b
SHA512 7febacf984a682f719361ff11eb940ffacb6245254a47336937c9ed9479f6b97fe00771aae960ced3c3dcb577a09ba66413e908e375c04863d987a29d45ae2f6
MD5 SHA1 SHA512

.text

SHA256 b9697556c18c86be386359fa16ca3186f82352246499790dbd0890abbde3ff0d
MD5 2df06693054d4889a2db11a8fe1a5a85
SHA1 533890faa4816984d7ea5f60110564107f8d413c
SHA512 0a3eb6b7130582bb141ffd807cf0dbf7f2fbcbd9bcf845f94c00e06306e6f69df3d95bea59b65aec837ee66026502f1ca15b99730f77e94b304896d1785d81a3
SSDEEP 768:Ir+aWI+c1t64d/ZuFvg1Y9v1zZyAfdraT0KtYbe0D3i:S+aQc1w4vuFvJhEem+be0D
MD5 SHA1 SHA512 SSDEEP

Sharing

General

Malware Config

Signatures

File Explorer