27786d9c7ad6b363657f1ad0cde22d5e_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

27786d9c7ad6b363657f1ad0cde22d5e_JaffaCakes118
Size

259KB
MD5

27786d9c7ad6b363657f1ad0cde22d5e
SHA1

a4ed16b79b4df2998cd1d4f7bd4ea92a442bd4cb
SHA256

d56ef4e9a10e00d0405c727accb42729e060fee1bb74ab0ebc03c0b328f248b6
SHA512

8bd7183fe4ce961635a1f4c8f7e543aee8df9cb1c3442562b3a5fc7e2a693805eef099a1671563a42c566a3285e50c28bb3aa07d216cd941010ac07e2aae80c6
SSDEEP

1536:XL3GZZdJ7TAt6MlzpHN2VLco2yM5ohCBwLqmbiQGrDthd5hovTuFc:73EZdNAXtALOwDiTDthdov

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
27786d9c7ad6b363657f1ad0cde22d5e_JaffaCakes118

Files

27786d9c7ad6b363657f1ad0cde22d5e_JaffaCakes118
.exe windows:5 windows x86 arch:x86

65b657153ed0e68706d3a0ff13960303

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

user32

GetSysColor
UnhookWindowsHookEx
SetWindowPos
GetSubMenu
PostQuitMessage
EqualRect
EnableMenuItem
EnumWindows
GetSysColorBrush
GetMessageA
GetScrollPos
SetWindowTextA
FrameRect

kernel32

InterlockedExchange
GetStartupInfoA
FileTimeToSystemTime
QueryPerformanceCounter
GetThreadLocale
RtlUnwind
GetTempPathA
ExitProcess
GetTickCount
GetCurrentProcessId
GetTimeZoneInformation
VirtualAllocEx
SetUnhandledExceptionFilter
GetFileAttributesA

gdi32

CopyEnhMetaFileA
CreateICW
CreateCompatibleBitmap
SetViewportExtEx
GetMapMode
SelectClipPath
FillRgn
ExcludeClipRect
DPtoLP

ole32

CoRevokeClassObject
CoInitialize
CoTaskMemRealloc
CoInitializeSecurity
CoCreateInstance
StringFromGUID2
StgOpenStorage
OleRun
DoDragDrop

advapi32

RegCreateKeyA
CryptHashData
CheckTokenMembership
GetSecurityDescriptorDacl
FreeSid
RegCreateKeyExW
GetUserNameA
QueryServiceStatus
AdjustTokenPrivileges
RegQueryValueExW

msvcrt

_mbscmp
strlen
_CIpow
__setusermatherr
_lock
__getmainargs
iswspace
strncpy
_strdup
_flsbuf
__initenv
fflush
_fdopen
raise
strcspn
puts
signal
fprintf

comctl32

ImageList_LoadImageW
ImageList_LoadImageA
InitCommonControls
ImageList_GetIconSize
ImageList_Destroy
ImageList_DragEnter
ImageList_DrawEx
ImageList_ReplaceIcon
ImageList_SetIconSize
CreatePropertySheetPageA
ImageList_Write
ImageList_GetBkColor
ImageList_GetIcon

shell32

DoEnvironmentSubstW
ShellExecuteEx
SHBrowseForFolderA
CommandLineToArgvW
DragAcceptFiles
ExtractIconExW
DragQueryFileA
DragQueryFileW
ShellExecuteW
SHGetPathFromIDList
ExtractIconW

oleaut32

SafeArrayGetUBound
SafeArrayRedim
SafeArrayPtrOfIndex
SafeArrayUnaccessData
SysReAllocStringLen
VariantCopy
SafeArrayCreate
SafeArrayPutElement

Sections

.text
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 41KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 104KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

dcnzouk
Size: 80KB - Virtual size: 156KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

65b657153ed0e68706d3a0ff13960303

Headers

File Characteristics

Imports

user32

kernel32

gdi32

ole32

advapi32

msvcrt

comctl32

shell32

oleaut32

Sections

.text Size: 34KB - Virtual size: 34KB

.data Size: 41KB - Virtual size: 40KB

.rsrc Size: 6KB - Virtual size: 104KB

dcnzouk Size: 80KB - Virtual size: 156KB

.text
Size: 34KB - Virtual size: 34KB

.data
Size: 41KB - Virtual size: 40KB

.rsrc
Size: 6KB - Virtual size: 104KB

dcnzouk
Size: 80KB - Virtual size: 156KB