2fb67e2bddd4d39635512808c62f0ed0_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

2fb67e2bddd4d39635512808c62f0ed0_JaffaCakes118
Size

81KB
MD5

2fb67e2bddd4d39635512808c62f0ed0
SHA1

04cb9f54741980082ef60efbf632adfc712696ed
SHA256

aa615e97b117122a26cab44cc623fa9998a9fa361846632d75076c6b04093d5e
SHA512

93d814f7ec82164abd884874d643789f4f2186831a12760a1ab3d090c0a4aec8173900719d944f7711b5cf9d57da556e56b6711afb1f502b5aba6bad5ac3d311
SSDEEP

1536:M7p8+PrPHYauBop61nV+d3Hnt5D+wpIo70qu43dmuck:m8+jPYauB06JM3HLbpIo043guH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2fb67e2bddd4d39635512808c62f0ed0_JaffaCakes118

Files

2fb67e2bddd4d39635512808c62f0ed0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2b1455a8d180184397bf9e5d87029386

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

user32

EqualRect
PostQuitMessage
EnumWindows
EnableMenuItem
SetWindowPos
FrameRect
GetSubMenu
GetScrollPos
GetSysColor
GetMessageA
GetSysColorBrush
SetWindowTextA
UnhookWindowsHookEx

kernel32

GetFileAttributesA
GetThreadLocale
ExitProcess
GetACP
VirtualAllocEx
GetTempPathA
RtlUnwind
GetSystemTime
GetCurrentProcessId
SetUnhandledExceptionFilter
GetStartupInfoA
GetTimeZoneInformation
FileTimeToSystemTime
InterlockedExchange

gdi32

DPtoLP
SelectClipPath
CreateCompatibleBitmap
FillRgn
ExcludeClipRect
CreateICW
SetViewportExtEx
CopyEnhMetaFileA
GetMapMode

ole32

StringFromGUID2
CoCreateInstance
CoInitialize
CoRevokeClassObject
CoInitializeSecurity
CoTaskMemRealloc
StgOpenStorage
OleRun
DoDragDrop

advapi32

CheckTokenMembership
GetSecurityDescriptorDacl
CryptHashData
RegQueryValueExW
RegCreateKeyExW
QueryServiceStatus
FreeSid
RegCreateKeyA
GetUserNameA
AdjustTokenPrivileges

msvcrt

fprintf
_fdopen
puts
_mbscmp
__initenv
_lock
strncpy
iswspace
signal
_strdup
strlen
__getmainargs
__setusermatherr
raise
strcspn
fflush
_flsbuf
_CIpow

comctl32

ImageList_GetIcon
ImageList_LoadImageA
ImageList_GetBkColor
InitCommonControls
CreatePropertySheetPageA
ImageList_Destroy
ImageList_SetIconSize
ImageList_DragEnter
ImageList_Write
ImageList_DrawEx
ImageList_ReplaceIcon
ImageList_LoadImageW
ImageList_GetIconSize

shell32

DragQueryFileA
SHBrowseForFolderA
DragAcceptFiles
ShellExecuteEx
CommandLineToArgvW
ExtractIconExW
ShellExecuteW
ExtractIconW
DoEnvironmentSubstW
DragQueryFileW
SHGetPathFromIDList

oleaut32

VariantCopy
SysReAllocStringLen
SafeArrayPtrOfIndex
SafeArrayPutElement
SafeArrayCreate
SafeArrayUnaccessData
SafeArrayGetUBound
SafeArrayRedim

Sections

.text
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 41KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

2b1455a8d180184397bf9e5d87029386

Headers

File Characteristics

Imports

user32

kernel32

gdi32

ole32

advapi32

msvcrt

comctl32

shell32

oleaut32

Sections

.text Size: 33KB - Virtual size: 32KB

.data Size: 41KB - Virtual size: 40KB

.rsrc Size: 6KB - Virtual size: 34KB

.text
Size: 33KB - Virtual size: 32KB

.data
Size: 41KB - Virtual size: 40KB

.rsrc
Size: 6KB - Virtual size: 34KB