5e7b009e1e35e8d3d6ed226238d7de0c_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

5e7b009e1e35e8d3d6ed226238d7de0c_JaffaCakes118
Size

45KB
MD5

5e7b009e1e35e8d3d6ed226238d7de0c
SHA1

d0c61f0bd4e8c31241f02e38d3fcb24121004e60
SHA256

f32a6748e28070f4f1d0f5b3ccbc72f8762d9c4af06bffb59bc17ae552290d96
SHA512

3a33dd60d0ce6a0080bdf7014f9e2287a0cb9cf866e14153b8fddd5a274a55bf45ad069e5abe9ff0595bcad00c23a4945b445ffcbece157e8042a459b513db12
SSDEEP

768:B7Ud6M97f8X6ElMTaUMMnMMMMMQqvuOYQIYQDvmIhBfVRqX1iDXfK1OJ1ngHN78w:hUd6cj8X62MTaUMMnMMMMMQqvuOYQIYP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5e7b009e1e35e8d3d6ed226238d7de0c_JaffaCakes118

Files

5e7b009e1e35e8d3d6ed226238d7de0c_JaffaCakes118
.exe windows:5 windows x86 arch:x86

b5f3c0fa0678c75c01db0a8c820e4f3c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ntdll

NtSuspendProcess
RtlAddAccessAllowedObjectAce
RtlAdjustPrivilege
NtQuerySemaphore

uxtheme

GetThemeMargins
CloseThemeData
GetThemeFont
OpenThemeData
DrawThemeBackground
IsAppThemed
DrawThemeParentBackground
GetThemeAppProperties
GetThemeMetric
GetThemeBackgroundContentRect
IsThemeActive
GetThemeBackgroundExtent
SetWindowTheme
GetThemePartSize
GetThemeColor

shell32

SHGetPathFromIDListA
SHGetFolderPathW
SHGetPathFromIDListW
SHFileOperationW
ShellExecuteW
SHCreateShellItem
ExtractAssociatedIconExW
SHBindToParent
SHGetSpecialFolderPathW
ShellExecuteA
SHChangeNotify
SHPathPrepareForWriteW
SHGetDataFromIDListW
SHAppBarMessage
ExtractIconExW
SHBrowseForFolderW
Shell_NotifyIconW
SHGetSpecialFolderLocation
ShellAboutW
SHGetFileInfoW
SHGetInstanceExplorer
DragQueryFileW
ExtractIconW
SHGetDesktopFolder
SHSetLocalizedName
SHGetFolderPathAndSubDirW
ShellExecuteExW
Shell_NotifyIconA
SHGetFolderLocation

kernel32

VirtualAlloc

psapi

GetProcessImageFileNameW

rtutils

TraceDumpExA
RouterLogEventStringA
LogErrorW
RouterLogRegisterA
RouterGetErrorStringW
RouterLogEventExA

ddraw

DirectDrawCreate

Sections

.text
Size: 1024B - Virtual size: 996B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 12KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

b5f3c0fa0678c75c01db0a8c820e4f3c

Headers

DLL Characteristics

File Characteristics

Imports

ntdll

uxtheme

shell32

kernel32

psapi

rtutils

ddraw

Sections

.text Size: 1024B - Virtual size: 996B

.rsrc Size: 26KB - Virtual size: 26KB

.data Size: 2KB - Virtual size: 40KB

.idata Size: 2KB - Virtual size: 1KB

.rdata Size: 12KB - Virtual size: 40KB

.text
Size: 1024B - Virtual size: 996B

.rsrc
Size: 26KB - Virtual size: 26KB

.data
Size: 2KB - Virtual size: 40KB

.idata
Size: 2KB - Virtual size: 1KB

.rdata
Size: 12KB - Virtual size: 40KB