3e04a7002744fe584511b2055972cdf3_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

3e04a7002744fe584511b2055972cdf3_JaffaCakes118
Size

183KB
MD5

3e04a7002744fe584511b2055972cdf3
SHA1

6bd417fd806bb9d52f7071e984dc19dcbcf2a4b4
SHA256

8aca7bb5bc16c34da62cfc60df950d530522ca0a8880e17fafba00bfc1ca462b
SHA512

4d5fcc96bc6dfd1e63153755372d5e86e4e8cb1444e52d664818a9204299f2497d79b7b80ad218567f4b67d94fd6e4f931396710eb57bac6e5e36e34d17cc5a9
SSDEEP

3072:ej/j2UdMHc/hgLsmxs9NlSpQT1ljph1VdFC7DM/0Xuqg3RlIF5Xd5:ej/j52GV2a5hO7k0Xxg3f+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3e04a7002744fe584511b2055972cdf3_JaffaCakes118

Files

3e04a7002744fe584511b2055972cdf3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e618350e451c44aa00d642d611a8b214

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

ole32

CoCreateGuid
CoGetMalloc
CoTaskMemAlloc
OleRun
CoCreateInstance
GetHGlobalFromStream
RegisterDragDrop
OleGetAutoConvert
ProgIDFromCLSID
OleDuplicateData
StgOpenStorageOnILockBytes
CLSIDFromString
CoFreeUnusedLibraries
ReleaseStgMedium
RevokeDragDrop
CLSIDFromProgID
CoGetClassObject
StringFromCLSID
OleRegGetUserType
GetHGlobalFromILockBytes
CoTaskMemFree
StgCreateDocfileOnILockBytes
CreateStreamOnHGlobal
CreateILockBytesOnHGlobal

comdlg32

GetFileTitleA

user32

ChildWindowFromPoint
SetClipboardData
EmptyClipboard
MonitorFromWindow
DrawEdge
GetSysColorBrush
ToAscii
RegisterClassW
ClipCursor
SetScrollRange
SetWindowsHookExW
CallNextHookEx
DefWindowProcW
DestroyCursor
DestroyIcon
WinHelpW
SetWindowPos
IsClipboardFormatAvailable
UnhookWindowsHookEx
GetSysColor

rpcrt4

RpcBindingFromStringBindingA
RpcStringBindingComposeA
RpcBindingSetAuthInfoA
NdrClientCall
RpcStringFreeA

shlwapi

PathStripToRootW
PathIsURLW
PathIsRootW
PathIsRelativeW
PathCanonicalizeW
PathCombineW

kernel32

LocalAlloc
CreateFiberEx
GetSystemTime
VerLanguageNameW
FindResourceExA
SetCommConfig
FileTimeToLocalFileTime
SearchPathW
GetFileType
UnlockFile
GetVolumeInformationW
LockFile
EnumResourceNamesW
IsDBCSLeadByte
GetProfileStringW
FlushFileBuffers
GetFileTime
GetUserDefaultLangID
GetFileAttributesA
GetVersionExW
CompareStringW
FileTimeToSystemTime
SetEndOfFile
FlushFileBuffers
GetSystemDirectoryW

gdi32

ExtCreatePen
CreatePen
PolyBezier
SetTextColor
StrokePath
FlattenPath
PlgBlt
GetBitmapBits
AnimatePalette
SetStretchBltMode
CreateFontIndirectA
GetBkColor
RoundRect
GetPath
SetDIBits

comctl32

ImageList_GetIconSize
ImageList_DrawEx
ImageList_Create
ImageList_Add
ImageList_Destroy

Sections

.text
Size: 155KB - Virtual size: 155KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.lib
Size: 512B - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e618350e451c44aa00d642d611a8b214

Headers

File Characteristics

Imports

ole32

comdlg32

user32

rpcrt4

shlwapi

kernel32

gdi32

comctl32

Sections

.text Size: 155KB - Virtual size: 155KB

.rdata Size: 3KB - Virtual size: 2KB

.data Size: 23KB - Virtual size: 22KB

.lib Size: 512B - Virtual size: 80KB

.text
Size: 155KB - Virtual size: 155KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 23KB - Virtual size: 22KB

.lib
Size: 512B - Virtual size: 80KB