2a662f283c6d9fceb1c473aaf9175bd0_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

2a662f283c6d9fceb1c473aaf9175bd0_JaffaCakes118
Size

199KB
MD5

2a662f283c6d9fceb1c473aaf9175bd0
SHA1

8ffa8905800cfb84a78ecc99b20619ba9dfdcd79
SHA256

15753413f251eedffead89157a3a6bdc0cc81b70e9728a11160c5c0d660309ab
SHA512

1e0338cc9774c783d8b21281aaeb215f2114155c566508d2a2d25c367b0073f05d48598cbe1d2818428ce41e640d98c16d03a7fab7df2ba48bb8c4654ae31fd3
SSDEEP

3072:RY2YO8ylMKho7tDs3i9JHPuknAkBC9bAu+Tsi0yv74nwXRHgThujEq+G21gTTurh:MO8ylMOF3yJHjA44ku+Qg6wXKd4BoH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2a662f283c6d9fceb1c473aaf9175bd0_JaffaCakes118

Files

2a662f283c6d9fceb1c473aaf9175bd0_JaffaCakes118
.exe windows:5 windows x86 arch:x86

5f5a9af46d9aa8eb99610c7f89c91c54

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GlobalLock
WriteConsoleA
FileTimeToDosDateTime
GetStartupInfoA
GetOEMCP
WritePrivateProfileStringA
GetLocaleInfoA
SetCurrentDirectoryA
VirtualProtect
GlobalUnlock
GetModuleHandleA
GetTickCount

user32

EnableMenuItem
RegisterClipboardFormatA
GetFocus
PostMessageA
IntersectRect
RemoveMenu
GetLastActivePopup
GetSysColor
SetFocus
GetDCEx

msvcrt

log10
_errno
_acmdln
isdigit
_setmode
_fstat
__setusermatherr
_except_handler3
puts
calloc
exit
__set_app_type
__p__fmode
__p__commode
__getmainargs
qsort
_adjust_fdiv
_initterm
_exit
_XcptFilter

version

VerQueryValueW
GetFileVersionInfoSizeA
VerQueryValueA
VerInstallFileW
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerLanguageNameA

shell32

SHGetPathFromIDList
SHBrowseForFolderW
SHCreateDirectoryExA
DragQueryFile
ExtractIconA
DragFinish
ShellExecuteExW
SHChangeNotify

advapi32

InitializeAcl
CryptAcquireContextA
CryptHashData
QueryServiceStatus
GetUserNameA
DeregisterEventSource

oleaut32

VariantCopy
SysStringLen
SysReAllocStringLen
VariantClear
SafeArrayCreate
SafeArrayGetUBound
SysAllocStringLen
VariantInit
GetErrorInfo
SafeArrayUnaccessData
SafeArrayRedim
SysAllocStringByteLen

ole32

CoRevokeClassObject
StgOpenStorage
CreateStreamOnHGlobal
RegisterDragDrop
CoUninitialize
CoDisconnectObject
PropVariantClear
ProgIDFromCLSID
OleGetClipboard
StringFromCLSID
CoReleaseMarshalData
DoDragDrop
IsEqualGUID
CoTaskMemFree

comctl32

InitCommonControls

Sections

.text
Size: 155KB - Virtual size: 155KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5f5a9af46d9aa8eb99610c7f89c91c54

Headers

File Characteristics

Imports

kernel32

user32

msvcrt

version

shell32

advapi32

oleaut32

ole32

comctl32

Sections

.text Size: 155KB - Virtual size: 155KB

.data Size: 14KB - Virtual size: 14KB

.rsrc Size: 27KB - Virtual size: 27KB

.text
Size: 155KB - Virtual size: 155KB

.data
Size: 14KB - Virtual size: 14KB

.rsrc
Size: 27KB - Virtual size: 27KB