2a246757c0087c18de1a4054c45901b6_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

2a246757c0087c18de1a4054c45901b6_JaffaCakes118
Size

324KB
MD5

2a246757c0087c18de1a4054c45901b6
SHA1

ad91341d0c539a098a81422155f79ddbf2ec9262
SHA256

10d6c4670fb9cb1a03725daf0820cd16a8f8688e425d8cd6c5834c67aa3a2552
SHA512

3889845c7c5a562d6ecc61fee74578c98433afffe3dfcfe5a9cc74bae6fb6c6bee841e80a5972d0ae1e126414e91e02aed3d7861cd011871a829b012ae088dac
SSDEEP

6144:6QFeK8R8yCVYFSbsudx7j3vi/B68wD4C9jrFFRLRLuMR3o07bHm1:6QPuESQdx7UNOL9bR4coyT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2a246757c0087c18de1a4054c45901b6_JaffaCakes118

Files

2a246757c0087c18de1a4054c45901b6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c4d0b8f6f30cba17519c078ed68b65f5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetVersionExA
TlsGetValue
VirtualProtect
GetCommandLineA
ExitProcess

user32

GetMonitorInfoW
GetMenu
CreateCursor
SetWindowTextW
SetCapture
SetDlgItemInt
ShowOwnedPopups
CascadeWindows
wsprintfA
EnableMenuItem
ScreenToClient
EndDialog
FlashWindow
GetSysColorBrush
CreateDesktopA
DrawStateA
PostThreadMessageA
GetMenuStringA

gdi32

SetPolyFillMode
Pie
GetPixelFormat
GetFontData
MoveToEx
CreateEnhMetaFileW
GetStretchBltMode
GetOutlineTextMetricsW
PathToRegion
GetSystemPaletteEntries
SelectClipRgn
PlayEnhMetaFile

advapi32

InitiateSystemShutdownA
RegQueryValueExW
LookupPrivilegeValueW
SetSecurityDescriptorSacl
RegEnumKeyW
GetSecurityDescriptorSacl
AdjustTokenPrivileges
RegCloseKey
CryptGetUserKey
SetKernelObjectSecurity
DuplicateTokenEx
RegQueryInfoKeyW
CloseServiceHandle
NotifyBootConfigStatus
OpenSCManagerW
AllocateLocallyUniqueId
SetSecurityDescriptorDacl
CryptGenKey
EnumServicesStatusW
RegFlushKey
ImpersonateSelf
RegDeleteValueW
CryptSetProvParam
CryptEncrypt
GetExplicitEntriesFromAclW
ReportEventW
SetTokenInformation
SetServiceObjectSecurity

shell32

SHAddToRecentDocs

ole32

ReadFmtUserTypeStg

oleaut32

LoadTypeLi
SafeArrayGetElement
LoadTypeLibEx
SetErrorInfo

shlwapi

StrRetToStrW
PathIsRootW
wnsprintfA
PathIsRelativeW
StrToIntW
StrCmpNIA

setupapi

SetupDiSetDeviceInstallParamsW

Sections

.text
Size: 308KB - Virtual size: 304KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

c4d0b8f6f30cba17519c078ed68b65f5

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

shlwapi

setupapi

Sections

.text Size: 308KB - Virtual size: 304KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 8KB - Virtual size: 5KB

.text
Size: 308KB - Virtual size: 304KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 8KB - Virtual size: 5KB