0fb5fb68ed0aae0c8038e376ea869967_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

0fb5fb68ed0aae0c8038e376ea869967_JaffaCakes118
Size

131KB
MD5

0fb5fb68ed0aae0c8038e376ea869967
SHA1

63aaff46222c4e5c4c866d59aeae2de453603994
SHA256

75a20e4544aeef73df591a2eebb507fb50571b63a204a8f1fc6ada4f956c4393
SHA512

03b7e0665f87fe2d6af5b3db41ef92c26c3f40717b206539c0e936105fdd2ad838ddc95c540b1562ef6302529735677ffd2962e5d453279d89b9d4cdc6a36872
SSDEEP

3072:zkDvzehIg0Ib5dQm+9YjqoQsnXERP5nsKDQEjy9ktVi+IZn/:Yep5dQ3YjNQsUR8qykji+g

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0fb5fb68ed0aae0c8038e376ea869967_JaffaCakes118

Files

0fb5fb68ed0aae0c8038e376ea869967_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6accb107de48de4364787cd313f8c801

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

VirtualProtect
GetUserDefaultLangID
GetSystemDirectoryA
IsBadCodePtr
GetModuleHandleA
DisableThreadLibraryCalls
GlobalLock
QueryPerformanceCounter
VirtualQuery
RtlUnwind
GetTimeZoneInformation
FreeEnvironmentStringsW
LocalAlloc
GetStartupInfoA

msvcrt

log10
_initterm
sprintf
__getmainargs
__p__environ
strtol
__set_app_type
atexit
exit
floor
_lseek
_snprintf
fclose
__p__fmode
_XcptFilter
_except_handler3
wcsstr
_controlfp
_dup
__setusermatherr
_adjust_fdiv
_acmdln
__p__commode
_fstat

comctl32

ImageList_DragEnter
ImageList_SetDragCursorImage
ImageList_ReplaceIcon
ImageList_DragShowNolock
ImageList_LoadImageA
ImageList_EndDrag
ImageList_Add
ImageList_Create

advapi32

RegDeleteKeyA
RegOpenKeyExW
QueryServiceStatus
RegDeleteValueA
GetTokenInformation
RegSetValueExW
RegDeleteValueW

ole32

CoInitializeEx
OleSetClipboard
ReleaseStgMedium
GetRunningObjectTable
CreateItemMoniker
CoUninitialize
CLSIDFromString
CoFreeUnusedLibraries
OleSetMenuDescriptor
OleRun

user32

CreateMenu
GetDesktopWindow
MapWindowPoints
SetRect
GetWindowLongA
RegisterClipboardFormatA
ReleaseDC
UnregisterClassA
SetScrollPos
UnhookWindowsHookEx
DestroyMenu
EndDialog
InflateRect
IsIconic
GetMenuItemCount
GetDC

shell32

SHGetFileInfo
ExtractIconExW
SHGetDiskFreeSpaceExW
SHBrowseForFolderA
DragAcceptFiles
SHGetFileInfoA
SHGetMalloc
SHGetFolderLocation
SHAppBarMessage
ExtractIconA

gdi32

GetCurrentObject
DPtoLP
ExcludeClipRect
SetViewportExtEx
CreateEnhMetaFileA
CloseMetaFile
SetArcDirection

oleaut32

VariantInit
SysStringByteLen
SetErrorInfo
VariantCopy
SafeArrayUnaccessData
LoadTypeLib
SafeArrayGetElement

version

VerFindFileW
GetFileVersionInfoW
VerQueryValueW
VerLanguageNameA
VerInstallFileA
GetFileVersionInfoSizeA

Sections

.text
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 17KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 95KB - Virtual size: 172KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

6accb107de48de4364787cd313f8c801

Headers

File Characteristics

Imports

kernel32

msvcrt

comctl32

advapi32

ole32

user32

shell32

gdi32

oleaut32

version

Sections

.text Size: 18KB - Virtual size: 17KB

.data Size: 17KB - Virtual size: 40KB

.rsrc Size: 95KB - Virtual size: 172KB

.text
Size: 18KB - Virtual size: 17KB

.data
Size: 17KB - Virtual size: 40KB

.rsrc
Size: 95KB - Virtual size: 172KB