19309529f2fea2f04f0b4eb8f2d00f15_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

19309529f2fea2f04f0b4eb8f2d00f15_JaffaCakes118
Size

84KB
MD5

19309529f2fea2f04f0b4eb8f2d00f15
SHA1

a8adc32d8565b3a173d4ba95b5d5deae083999be
SHA256

b18697aa0e1f38a03e443768d968c464a4736f65779d11dffccf14aeda817e5f
SHA512

0d019475b877a0910876688c24dab331e86693ae3c3913b858ab2bdbaf64f8376b8b0c1c16775a85cb9fed12df5aeda2602afc870c120e52339b6e431269a90f
SSDEEP

1536:LZXIITaO1l9BOBaqCxf2o3ZW3q2yDGatBLxMgVh:xh9qtXSBLSk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
19309529f2fea2f04f0b4eb8f2d00f15_JaffaCakes118

Files

19309529f2fea2f04f0b4eb8f2d00f15_JaffaCakes118
.exe windows:4 windows x86 arch:x86

53e4d80b8f2edc278ee60a30380c283f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegFlushKey
RegDeleteKeyA
RegReplaceKeyW
RegDeleteValueA
RegCreateKeyExW
RegQueryValueExW
RegQueryInfoKeyW
RegReplaceKeyA
RegQueryValueA
RegDeleteValueW
RegOpenKeyA
RegQueryValueW
RegEnumKeyA
RegQueryInfoKeyA
RegEnumValueA
RegCreateKeyExA
RegLoadKeyW
RegGetKeySecurity
RegEnumKeyExW

comctl32

ImageList_AddMasked
ImageList_Read
ImageList_AddIcon
ImageList_DrawEx
ImageList_BeginDrag
ImageList_GetImageRect
ImageList_LoadImage
ImageList_Create
ImageList_LoadImageW
ImageList_DragShowNolock
ImageList_DragMove
ImageList_DrawIndirect
ImageList_Destroy
ImageList_Copy
ImageList_EndDrag
ImageList_GetIcon
ImageList_DragLeave
ImageList_Replace
ImageList_LoadImageA

user32

DrawIcon
EndDialog
AlignRects
DrawTextA
AppendMenuW
GetFocus
LoadCursorA
GetWindowTextA
DialogBoxParamW
InsertMenuA
CreateIcon
DrawIconEx
GetWindowTextLengthA
CopyRect
GetMenu
DrawTextW
CopyImage

kernel32

SetLastError
GetLastError
ReadFile
GetCPInfo
DeleteFileA
CopyFileA
FindAtomA
CreateThread
GetConsoleMode
OpenFile
GetFileTime
CopyFileW
ReadConsoleA
GetCommandLineA
Sleep
GlobalFree
GetFileSize
OpenFileMappingA
CopyFileExA
WriteFile

gdi32

AddFontResourceExA
GetBitmapBits
GetPixel
GetDCOrgEx
AddFontResourceExW
CloseMetaFile
CopyMetaFileA
AbortPath
ExtTextOutA
GetPixel
GetClipBox
CloseFigure
DeleteObject
AddFontResourceTracking
AddFontResourceA
SetTextColor

Sections

.text
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 64KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

53e4d80b8f2edc278ee60a30380c283f

Headers

File Characteristics

Imports

advapi32

comctl32

user32

kernel32

gdi32

Sections

.text Size: 8KB - Virtual size: 4KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 64KB - Virtual size: 112KB

.reloc Size: - Virtual size: 2KB

.rsrc Size: 4KB - Virtual size: 2KB

.text
Size: 8KB - Virtual size: 4KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 64KB - Virtual size: 112KB

.reloc
Size: - Virtual size: 2KB

.rsrc
Size: 4KB - Virtual size: 2KB