017baf42fbddb3fa25adb6b990bb8551_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

017baf42fbddb3fa25adb6b990bb8551_JaffaCakes118
Size

41KB
MD5

017baf42fbddb3fa25adb6b990bb8551
SHA1

152dbdb4ddd7d8103e49b362e122a99f5050678a
SHA256

069b33ccfaddc45c7dc325bbfc83b85db6980b8ebcd9839d58504afad0629f15
SHA512

0377599075aa73fcb95d96686e92708b3534ecd858f8abdff53388439302b3646ed76e5e51fbbaebc72a954643fb7e26a4f5a4e49d0161fe6d70d7b9b0abbb36
SSDEEP

768:es3NNiP3pHusxKdt6a1447mzuDEIALU6xn+Iwh68Nn9:tPiP508aekmzWe46ZSh68

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
017baf42fbddb3fa25adb6b990bb8551_JaffaCakes118

Files

017baf42fbddb3fa25adb6b990bb8551_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a9771eb50c98cafa1f421c168f04f685

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

GetPixel
AddFontResourceExW
AbortPath
GetDCOrgEx
BitBlt
AddFontResourceA
CopyMetaFileA
GetClipBox
AddFontMemResourceEx
AddFontResourceTracking
GetCurrentPositionEx
CancelDC
ClearBrushAttributes
AddFontResourceExA
CloseMetaFile
GetBitmapBits
ExcludeClipRect
GetPixel
ClearBitmapAttributes
AddFontResourceW
DeleteObject
BeginPath

kernel32

CopyFileW
CreateDirectoryA
SetLastError
DeleteAtom
CopyFileExA
GetFileSize
FindAtomA
GetLastError
GetCommandLineA
CreateThread
ReadFile
CreateProcessA
DeleteFileA
CopyFileExW
ReadConsoleA
DeleteFileW
GlobalFree
GetConsoleMode
Sleep
ExitThread
GetFileTime

user32

EndDialog
CloseWindow
CopyImage
CreateIcon
GetDC
DrawTextW
AppendMenuA
GetMenu
GetWindowTextLengthA
DrawIconEx
GetCursor
IsWindow
AlignRects
GetWindowTextA
CalcMenuBar
DrawIcon
AppendMenuW
LoadMenuA
GetFocus
DrawTextA
LoadCursorA
DialogBoxParamW
CopyIcon

comctl32

ImageList_DrawIndirect
ImageList_LoadImageW
ImageList_GetIconSize
ImageList_DrawEx
ImageList_Replace
ImageList_GetDragImage
ImageList_Destroy
ImageList_GetImageRect
ImageList_GetIcon
ImageList_Create
ImageList_LoadImageA
InitCommonControls
ImageList_DragLeave
ImageList_AddIcon
ImageList_DragShowNolock
ImageList_DragMove
ImageList_Remove
ImageList_GetImageInfo
ImageList_Read
ImageList_AddMasked
ImageList_EndDrag
ImageList_LoadImage
ImageList_BeginDrag

advapi32

RegEnumValueA
RegQueryValueExW
RegDeleteKeyA
RegQueryValueA
RegEnumKeyW
RegOpenKeyW
RegOpenKeyExW
RegGetKeySecurity
RegCreateKeyExW
RegEnumValueW
RegEnumKeyExW
RegQueryInfoKeyW
RegOpenKeyA
RegDeleteValueW
RegQueryValueW
RegCreateKeyW
RegFlushKey
RegOpenKeyExA
RegLoadKeyA
RegEnumKeyA
RegReplaceKeyA

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 23KB - Virtual size: 79KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a9771eb50c98cafa1f421c168f04f685

Headers

File Characteristics

Imports

gdi32

kernel32

user32

comctl32

advapi32

Sections

.text Size: 4KB - Virtual size: 4KB

.rdata Size: 3KB - Virtual size: 2KB

.data Size: 23KB - Virtual size: 79KB

.rsrc Size: 10KB - Virtual size: 12KB

.text
Size: 4KB - Virtual size: 4KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 23KB - Virtual size: 79KB

.rsrc
Size: 10KB - Virtual size: 12KB