40910f841f91aa4eee41d4589cf69acf_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

40910f841f91aa4eee41d4589cf69acf_JaffaCakes118
Size

91KB
MD5

40910f841f91aa4eee41d4589cf69acf
SHA1

c1250607b252d5f1dad4d2163d60411075c77975
SHA256

3156b3e3afd38e30b281e40d937338b6f4fe4e191bf1cec61d0b827b0cba18b8
SHA512

295b0c7c4904facde24921af85c8e3b49b59ce89b7340b75018736aa3a9ff2e57da74049735a080db92e7613fdb63ad7be8a8c6e215ead8fa7e176d9b1237e27
SSDEEP

1536:KdLEO4TeqI4D/w/S8yYVDcBuuYSQMxZXB448oIO7V2TXbE59sVg0xdy7sdo:gfsewY/S8y4Qh5L58AKXbnfdywG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
40910f841f91aa4eee41d4589cf69acf_JaffaCakes118

Files

40910f841f91aa4eee41d4589cf69acf_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d9cd2998f0c38d3fea6a798ada797c37

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CalcMenuBar
CreateIcon
CopyRect
EndDialog
DrawTextW
IsWindow
GetCursor
GetWindowTextLengthA
GetDlgItem
CloseWindow
GetWindowTextA
LoadCursorA
DrawIcon
AppendMenuW
AlignRects
BlockInput
DrawTextA
InsertMenuA
GetFocus
CloseWindow
DialogBoxParamA
BlockInput
CreateIcon
GetDlgItem
GetFocus
LoadMenuA
IsWindow
CopyImage
AlignRects
GetMenu
GetDC
GetWindowTextA
DialogBoxParamW
EndDialog
DrawIcon

comctl32

ImageList_GetImageRect
ImageList_AddIcon
InitCommonControls
ImageList_GetIconSize
ImageList_GetDragImage
ImageList_LoadImageA
ImageList_DragEnter
ImageList_Create
ImageList_DragShowNolock
ImageList_LoadImage
ImageList_Draw
ImageList_Copy
ImageList_Merge
ImageList_Destroy
ImageList_DrawIndirect
ImageList_Remove
ImageList_GetImageCount

kernel32

GetStdHandle
GlobalFree
GetModuleHandleA
DeleteFileA
CloseHandle
GetFileSize
GetStringTypeA
lstrcatA
HeapAlloc
GetCommandLineA
GetDateFormatA
Sleep
lstrcmpA
SetLastError
GetFileAttributesA
lstrcpyA
WideCharToMultiByte
lstrcpynA
GetLastError

advapi32

RegReplaceKeyA
RegQueryValueExW
RegQueryValueExA
RegOpenKeyA
RegEnumKeyExA
RegDeleteKeyA
RegQueryValueW
RegGetKeySecurity
RegReplaceKeyW
RegOpenKeyW
RegOpenKeyExA
RegLoadKeyA
RegCreateKeyW
RegQueryInfoKeyW
RegDeleteKeyW
RegQueryValueA
RegQueryInfoKeyA
RegCreateKeyExA
RegEnumKeyA
RegEnumKeyExW

Sections

.nTiUvD
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.oMoA
Size: 65KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.GPTKV
Size: 6KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MSIF
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ

.gZzOLe
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d9cd2998f0c38d3fea6a798ada797c37

Headers

File Characteristics

Imports

user32

comctl32

kernel32

advapi32

Sections

.nTiUvD Size: 14KB - Virtual size: 13KB

.oMoA Size: 65KB - Virtual size: 65KB

.GPTKV Size: 6KB - Virtual size: 61KB

.MSIF Size: - Virtual size: 3KB

.gZzOLe Size: 1KB - Virtual size: 1KB

.nTiUvD
Size: 14KB - Virtual size: 13KB

.oMoA
Size: 65KB - Virtual size: 65KB

.GPTKV
Size: 6KB - Virtual size: 61KB

.MSIF
Size: - Virtual size: 3KB

.gZzOLe
Size: 1KB - Virtual size: 1KB