3fca4a28f30f43cd91326871359ee459_JaffaCakes118

General

Target

3fca4a28f30f43cd91326871359ee459_JaffaCakes118
Size

88KB
MD5

3fca4a28f30f43cd91326871359ee459
SHA1

e026329fcbd6615629f1b0896f4573c75937f373
SHA256

6a459007e53199841dd40fc8f4214e0bbd77de7eddb3ce2037a8ce91fce878c3
SHA512

ce79ca3c06f741ac144e361eb4d9d958496d153ad4dcfe5758d3786d35bcb3f5d7ee2ec246e91da7287a9fd8a0fa46358e7c483a3c6831ced79dfb054325abc3
SSDEEP

1536:P7m5v/5o+f3hiNncyuownWgjLtHvO+TBvJ030fK+yXWoaBbo:aDo3nc7ownWgfdG6ZK+8a2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3fca4a28f30f43cd91326871359ee459_JaffaCakes118

Files

3fca4a28f30f43cd91326871359ee459_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6d81012974cdf71118fa2c54bdb0e0b9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

ImageList_LoadImageW
ImageList_Read
ImageList_LoadImageA
ImageList_DragMove
ImageList_GetIconSize
ImageList_BeginDrag
ImageList_Copy
ImageList_Destroy
ImageList_DragEnter
ImageList_Merge
ImageList_Remove
ImageList_GetImageInfo
ImageList_ReplaceIcon
ImageList_DragShowNolock
ImageList_GetImageCount
ImageList_DrawEx
ImageList_Replace
ImageList_GetImageRect
ImageList_GetIcon

advapi32

RegEnumValueA
RegCreateKeyExA
RegEnumKeyExW
RegDeleteKeyA
RegCreateKeyW
RegQueryInfoKeyW
RegGetKeySecurity
RegQueryValueA
RegReplaceKeyW
RegOpenKeyA
RegDeleteValueW
RegOpenKeyW
RegQueryInfoKeyA
RegLoadKeyW
RegEnumKeyA
RegQueryValueW
RegOpenKeyExA

kernel32

GetCPInfo
GetFileSize
GlobalAlloc
GetFileType
GetLastError
Sleep
lstrlenA
GetModuleHandleA
GetStringTypeW
DeleteFileA
lstrcpynA
GetCommandLineA
HeapAlloc
FreeLibrary
GlobalFree
GetStdHandle
lstrcmpA
lstrcpyA
HeapFree
WideCharToMultiByte

user32

AlignRects
AppendMenuA
DialogBoxParamA
AppendMenuW
CopyRect
InsertMenuA
CloseWindow
CalcMenuBar
CopyImage
IsWindow
IsMenu
DrawTextA
DialogBoxParamW
GetFocus
EndDialog
DrawIcon
GetWindowTextLengthA

Sections

.povRPn
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.zaFWvy
Size: 67KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.cgmZ
Size: 512B - Virtual size: 123KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ZZUUr
Size: 1KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.dfjgo
Size: 1024B - Virtual size: 862B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6d81012974cdf71118fa2c54bdb0e0b9

Headers

File Characteristics

Imports

comctl32

advapi32

kernel32

user32

Sections

.povRPn Size: 14KB - Virtual size: 13KB

.zaFWvy Size: 67KB - Virtual size: 67KB

.cgmZ Size: 512B - Virtual size: 123KB

.ZZUUr Size: 1KB - Virtual size: 2KB

.dfjgo Size: 1024B - Virtual size: 862B

.povRPn
Size: 14KB - Virtual size: 13KB

.zaFWvy
Size: 67KB - Virtual size: 67KB

.cgmZ
Size: 512B - Virtual size: 123KB

.ZZUUr
Size: 1KB - Virtual size: 2KB

.dfjgo
Size: 1024B - Virtual size: 862B