2133c273465467ce3567cb1afdf9be41_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

2133c273465467ce3567cb1afdf9be41_JaffaCakes118
Size

89KB
MD5

2133c273465467ce3567cb1afdf9be41
SHA1

8905b3deda52a2cb7c09515cab81c54cdd42d34e
SHA256

5ee25136cff5015646185e6999aedc3443b531b06fb6125881361aeed008efe6
SHA512

f779cce8d4dfe34fd9d9ee9697b2ca520793144e5e3568850ab1fa0062aceeec086aba77e0ebf73c12106611f032a870fb00a6659f1dc5a73be93611efd1876a
SSDEEP

1536:IiIai++vDUYcZsazrKihZzHt9kJKy8Y0Kil1tchDXEtIFl0Prgdv2/BaL7ZBDx5e:IiIQ+74VzW0FNIWl8hDUt+lmX87r1FqV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2133c273465467ce3567cb1afdf9be41_JaffaCakes118

Files

2133c273465467ce3567cb1afdf9be41_JaffaCakes118
.exe windows:4 windows x86 arch:x86

71888628f799c6c9288389c7ac459641

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

user32

EnumWindows
SetWindowPos
GetSysColor
GetSubMenu
EnableMenuItem
GetMessageA
PostQuitMessage
SetWindowTextA
UnhookWindowsHookEx
FrameRect
GetSysColorBrush
EqualRect
GetScrollPos

kernel32

GetStartupInfoA
GetFileAttributesA
QueryPerformanceCounter
SetUnhandledExceptionFilter
ExitProcess
GetSystemTime
GetTimeZoneInformation
VirtualAllocEx
GetCurrentProcessId
GetTickCount
FileTimeToSystemTime
RtlUnwind
GetACP
GetOEMCP
GetTempPathA
GetThreadLocale
InterlockedExchange

gdi32

CreateICW
CreateCompatibleBitmap
DPtoLP
GetMapMode
FillRgn
SetViewportExtEx
SelectClipPath
ExcludeClipRect
CopyEnhMetaFileA

ole32

CoInitializeSecurity
CoInitialize
CoRevokeClassObject
CoCreateInstance
DoDragDrop
CoTaskMemRealloc
StringFromGUID2
StgOpenStorage
OleRun

advapi32

RegQueryValueExW
FreeSid
GetSecurityDescriptorDacl
QueryServiceStatus
CryptHashData
RegCreateKeyA
GetUserNameA
CheckTokenMembership
AdjustTokenPrivileges
RegCreateKeyExW

msvcrt

strncpy
__setusermatherr
fflush
signal
_mbscmp
_CIpow
strlen
iswspace
fprintf
strcspn
__getmainargs
_strdup
raise
__initenv
_flsbuf
_fdopen
_lock
puts

comctl32

ImageList_LoadImageW
ImageList_GetBkColor
CreatePropertySheetPageA
ImageList_GetIcon
ImageList_ReplaceIcon
ImageList_SetIconSize
ImageList_DrawEx
ImageList_Write
InitCommonControls
ImageList_DragEnter
ImageList_Destroy
ImageList_LoadImageA
ImageList_GetIconSize

shell32

SHGetPathFromIDList
DoEnvironmentSubstW
ExtractIconExW
ExtractIconW
DragQueryFileW
DragAcceptFiles
ShellExecuteW
CommandLineToArgvW
SHBrowseForFolderA
DragQueryFileA
ShellExecuteEx

oleaut32

SafeArrayUnaccessData
SafeArrayRedim
SafeArrayPutElement
SysReAllocStringLen
SafeArrayGetUBound
VariantCopy
SafeArrayPtrOfIndex
SafeArrayCreate

Sections

.text
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 45KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

71888628f799c6c9288389c7ac459641

Headers

File Characteristics

Imports

user32

kernel32

gdi32

ole32

advapi32

msvcrt

comctl32

shell32

oleaut32

Sections

.text Size: 37KB - Virtual size: 36KB

.data Size: 45KB - Virtual size: 44KB

.rsrc Size: 6KB - Virtual size: 84KB

.text
Size: 37KB - Virtual size: 36KB

.data
Size: 45KB - Virtual size: 44KB

.rsrc
Size: 6KB - Virtual size: 84KB