3a15fcaae19caca3c54137e7e3a748a1_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

3a15fcaae19caca3c54137e7e3a748a1_JaffaCakes118
Size

113KB
MD5

3a15fcaae19caca3c54137e7e3a748a1
SHA1

d6e42e79c5aa3f3dd297e9d802beb8c2ee95c978
SHA256

16eaf720adb77ca3f6e91a7267b86a220ba01ec2fe9e027bc710742c69b21dcb
SHA512

828d627d3712d6745a0cb10050a1c54df49515cd8e44ef42f7671a5322e05908a4b17f43078afe412514adb0006b8862b746c385f5746e7cbad4fb5d89f032f5
SSDEEP

1536:AwF0MyU/wuREDuRNO8oNCH9DOEv8ZrL4aRYacIzOVCqJ:AsdyqwuWDuRNO8oY1OZwaRRz8CG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3a15fcaae19caca3c54137e7e3a748a1_JaffaCakes118

Files

3a15fcaae19caca3c54137e7e3a748a1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

33c8cea3bc661be1d48bd61f4144bfc3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

AppendMenuA
CopyImage
DialogBoxParamW
IsWindow
DrawTextW
AppendMenuW
DrawIcon
LoadMenuA
GetWindowTextA
LoadCursorA
CreateIcon
DrawIconEx
InsertMenuA
CopyRect
GetDC
GetMenu
CloseWindow
GetFocus
DialogBoxParamA
LoadMenuA
EndDialog
GetDlgItem
DialogBoxParamW
DrawTextW
AppendMenuW
AppendMenuA
CopyRect
GetWindowTextA
DrawIconEx
CreateIcon
DrawTextA
IsWindow
GetCursor
GetDC
GetMenu
CloseWindow
BlockInput
CopyImage
DrawIcon

kernel32

lstrlenA
GetStdHandle
lstrcmpiA
GetModuleFileNameA
GetModuleHandleA
SetLastError
FreeLibrary
GlobalAlloc
GetFileAttributesA
HeapAlloc
GetDateFormatA
GetFileSize
DeleteFileA
GetLocalTime
GetStringTypeW
GetCPInfo
Sleep
GetFileType

comctl32

ImageList_DrawEx
ImageList_AddMasked
ImageList_LoadImageW
ImageList_DragEnter
ImageList_EndDrag
ImageList_GetIcon
ImageList_Replace
ImageList_Copy
InitCommonControls
ImageList_GetImageCount
ImageList_ReplaceIcon
ImageList_Destroy
ImageList_AddIcon
ImageList_Draw
ImageList_BeginDrag
ImageList_Merge
ImageList_GetImageInfo
ImageList_Remove
ImageList_LoadImageA

advapi32

RegGetKeySecurity
RegCreateKeyExA
RegQueryValueA
RegDeleteKeyA
RegQueryValueW
RegDeleteValueW
RegEnumKeyA
RegLoadKeyW
RegCreateKeyW
RegOpenKeyW
RegQueryValueExA
RegLoadKeyA
RegFlushKey
RegQueryInfoKeyW
RegEnumKeyW
RegReplaceKeyA
RegEnumValueW
RegQueryValueExW

Sections

.CkOfP
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.KDVaB
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pfKl
Size: 7KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xtOS
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.Yfzg
Size: 1024B - Virtual size: 887B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

33c8cea3bc661be1d48bd61f4144bfc3

Headers

File Characteristics

Imports

user32

kernel32

comctl32

advapi32

Sections

.CkOfP Size: 11KB - Virtual size: 11KB

.KDVaB Size: 28KB - Virtual size: 28KB

.pfKl Size: 7KB - Virtual size: 17KB

.xtOS Size: 2KB - Virtual size: 2KB

.Yfzg Size: 1024B - Virtual size: 887B

.rsrc Size: 1024B - Virtual size: 4KB

.CkOfP
Size: 11KB - Virtual size: 11KB

.KDVaB
Size: 28KB - Virtual size: 28KB

.pfKl
Size: 7KB - Virtual size: 17KB

.xtOS
Size: 2KB - Virtual size: 2KB

.Yfzg
Size: 1024B - Virtual size: 887B

.rsrc
Size: 1024B - Virtual size: 4KB