23d2d8c02fa26fa32c3d7a1ba9ccaa75_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

23d2d8c02fa26fa32c3d7a1ba9ccaa75_JaffaCakes118
Size

360KB
MD5

23d2d8c02fa26fa32c3d7a1ba9ccaa75
SHA1

09b6444d655789cdc0c791c92ea7c61c2aa4a8f3
SHA256

a763610572f8c69381b0e92f4b91a37e44b0360f2b471c21a2c2422253271714
SHA512

5f5780c7f0297c94c31a41f16b5058ad8b69c05296a2050368cdd20432435f6ec6040fd84f8cdbb9715ba33298914f5864e74b1507418575f6785545cc31b038
SSDEEP

6144:sla5QdEh4wvEZBXQgvV0WPXrA9zd5YMI+GLsLtsMOlJsIsxUrJv+w86STAmh:wa5QdC4GsvGPr5YMvGLsBeJsdO9v+WS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
23d2d8c02fa26fa32c3d7a1ba9ccaa75_JaffaCakes118

Files

23d2d8c02fa26fa32c3d7a1ba9ccaa75_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a8d9fa1283e9f3c128e8d8b5eab95b6b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
FindFirstFileExW
GetCommandLineA
CreateDirectoryW
WriteConsoleOutputCharacterA
ReadConsoleInputW
WritePrivateProfileStringA
PeekConsoleInputW
RemoveDirectoryW
QueryDosDeviceW
DebugBreak
GetSystemTimeAdjustment
GetPrivateProfileSectionW
GetProfileIntA
GetFileAttributesExA
ExitProcess
lstrcmpiW
GetModuleFileNameW
GetFileInformationByHandle
lstrcpyA
FreeEnvironmentStringsA
CopyFileExW
GetVersion
DuplicateHandle
GetVersionExA
lstrlenA
VirtualProtect
lstrcatW

user32

GetMenu
GetClassInfoExA
EnumChildWindows
RegisterDeviceNotificationW

gdi32

ArcTo
SetTextAlign
GetViewportOrgEx
PaintRgn
GetPixel
CreateDIBPatternBrush
CopyEnhMetaFileA
SetWinMetaFileBits
SetTextCharacterExtra
OffsetClipRgn

advapi32

EqualSid
ReadEventLogW
LookupAccountNameA
RegCreateKeyA
RegOpenKeyW
RegOpenKeyExW
MapGenericMask
RegSetValueExW
CloseEventLog
GetFileSecurityA
EnumDependentServicesW
GetSecurityDescriptorOwner
ImpersonateSelf
CreateServiceA
StartServiceCtrlDispatcherA

ole32

CoGetInterfaceAndReleaseStream
OleRegGetMiscStatus
CoResumeClassObjects
OleConvertIStorageToOLESTREAM
StgOpenStorage
CoInitializeEx
CoTreatAsClass
OleSetClipboard
RevokeDragDrop

oleaut32

SafeArrayGetLBound
SysStringLen
SetErrorInfo
SafeArrayPutElement
LoadTypeLi
SysAllocStringLen
SafeArrayCreate
SafeArrayGetElement

comctl32

ImageList_GetImageCount
ImageList_GetBkColor
ImageList_SetBkColor

shlwapi

PathIsUNCW
PathRenameExtensionW
PathSkipRootW
UrlApplySchemeW
PathIsDirectoryW
PathGetDriveNumberA
PathIsURLW
StrCatW
PathRemoveBlanksW
UrlCombineW

Sections

.text
Size: 332KB - Virtual size: 330KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

a8d9fa1283e9f3c128e8d8b5eab95b6b

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

ole32

oleaut32

comctl32

shlwapi

Sections

.text Size: 332KB - Virtual size: 330KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 20KB - Virtual size: 18KB

.text
Size: 332KB - Virtual size: 330KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 20KB - Virtual size: 18KB