25d21b7583d0ee60f6bd4cca0b4eaf5d_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

25d21b7583d0ee60f6bd4cca0b4eaf5d_JaffaCakes118
Size

84KB
MD5

25d21b7583d0ee60f6bd4cca0b4eaf5d
SHA1

199efbe187e8540b9e01510cedbd3a6c19e645fc
SHA256

c75a7e5de727590c53daf70f006d32dba7abab1f924525d8da7d53123dcfd207
SHA512

7b9bde32569d266a2f9ad10fbdb6be4a70592d646c8d6c1770bd494fa56f59f7017a74a8b6dded30d3d8f29face43c664a13fc0b1670a357fc41d9aa86f54b7e
SSDEEP

1536:0H6242v4N1wbw6ttrN6JWpwFZMCTa4nf2Z0foDjCPtTKps42:03gzwbxttuZfa4nfEcTss3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
25d21b7583d0ee60f6bd4cca0b4eaf5d_JaffaCakes118

Files

25d21b7583d0ee60f6bd4cca0b4eaf5d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

259c91a15721646c4827fa86f845827d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

ImageList_Read
ImageList_DragEnter
ImageList_DrawIndirect
ImageList_BeginDrag
ImageList_Draw
ImageList_LoadImageA
ImageList_AddIcon
ImageList_GetIconSize
ImageList_GetImageCount
ImageList_Merge
ImageList_ReplaceIcon
ImageList_AddMasked
ImageList_GetImageRect
ImageList_EndDrag
ImageList_GetImageInfo
ImageList_Destroy
ImageList_LoadImageW
ImageList_DragMove
ImageList_DrawEx

gdi32

AddFontResourceExW
CloseMetaFile
RestoreDC
AddFontResourceExA
GetBrushOrgEx
BitBlt
AbortPath
CopyMetaFileA
GetCurrentPositionEx
AddFontResourceTracking
GetClipBox
AddFontResourceW
ExcludeClipRect
CreateSolidBrush
SetTextColor
ExtTextOutA
AddFontMemResourceEx
BeginPath
CloseFigure
ClearBrushAttributes

user32

GetDlgItem
IsWindow
LoadCursorA
GetWindowTextLengthA
CreateIcon
AlignRects
CloseWindow
CopyRect
CopyIcon
CalcMenuBar
DrawTextW
DrawTextA
DrawIcon
BlockInput
IsMenu
GetMenu
GetWindowTextA
GetCursor
LoadMenuA

kernel32

SetLastError
WriteFile
CreateThread
DeleteFileW
GetFileTime
DeleteAtom
OpenFileMappingA
GetCommandLineA
GetFileSize
FindAtomA
CreateDirectoryA
GlobalFree
ReadConsoleA
GetConsoleMode
ExitThread
FindFirstFileA
GetCPInfo
CopyFileA
ReadFile

advapi32

RegEnumKeyExW
RegQueryValueW
RegOpenKeyExA
RegReplaceKeyA
RegQueryInfoKeyA
RegOpenKeyA
RegCreateKeyExA
RegQueryValueExW
RegQueryValueA
RegCreateKeyW
RegEnumValueA
RegFlushKey
RegReplaceKeyW
RegQueryValueExA
RegEnumKeyW
RegOpenKeyExW
RegDeleteKeyW
RegQueryInfoKeyW
RegEnumKeyA
RegEnumKeyExA

Sections

.text
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 64KB - Virtual size: 123KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

259c91a15721646c4827fa86f845827d

Headers

File Characteristics

Imports

comctl32

gdi32

user32

kernel32

advapi32

Sections

.text Size: 8KB - Virtual size: 4KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 64KB - Virtual size: 123KB

.reloc Size: - Virtual size: 2KB

.rsrc Size: 4KB - Virtual size: 1KB

.text
Size: 8KB - Virtual size: 4KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 64KB - Virtual size: 123KB

.reloc
Size: - Virtual size: 2KB

.rsrc
Size: 4KB - Virtual size: 1KB