62e625f758db24b24825f04302816a62_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

62e625f758db24b24825f04302816a62_JaffaCakes118
Size

88KB
MD5

62e625f758db24b24825f04302816a62
SHA1

e803e8ab86f53cd579a7c11206caffc8e98df060
SHA256

f0e71afba5ef2b9257d1a44caf5e3876694717846ebf8ea6ac3b85fc22dc34f3
SHA512

45c7ae54359076b1bf8a16fb641a6bc5da43e02b56e7c21065c0fabe3b3162f288afdc7d9e24eac27efde5f83925f153a4d51d11bdb9719e13c50d577ca19507
SSDEEP

1536:8tgdNHFE1I6Ha8oG7dYybXy+arAcz4y/VH7B0vdnHZs+49Ca0T6fc+CX:8tgd5FEq6Ha8Bx9Eh/RNwnHZ52D0T6fm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
62e625f758db24b24825f04302816a62_JaffaCakes118

Files

62e625f758db24b24825f04302816a62_JaffaCakes118
.exe windows:4 windows x86 arch:x86

fcf914004447bbd3b21cd7dd0d7b7d2d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetTempFileNameA
VirtualProtect
GetCurrentDirectoryA
FreeEnvironmentStringsW
GlobalFree
GetModuleHandleA
WritePrivateProfileStringA
GetStartupInfoA
lstrlenW
FileTimeToLocalFileTime
SetStdHandle
FreeEnvironmentStringsA
GetModuleHandleW

msvcrt

_XcptFilter
exit
_adjust_fdiv
_initterm
_ftol
__setusermatherr
__getmainargs
memchr
__set_app_type
_controlfp
log10
__p__commode
atof
getenv
_except_handler3
__p__fmode
strcat
_acmdln

gdi32

Polyline
CopyEnhMetaFileA
Arc
SetTextCharacterExtra
FillRgn
GetTextExtentPoint32A
RemoveFontResourceA
ExtCreateRegion
GetTextFaceA

oleaut32

SafeArrayGetElement
VariantClear
GetActiveObject
VariantCopyInd
GetErrorInfo
SafeArrayCreate
CreateErrorInfo
SysStringLen
SafeArrayPutElement
SysStringByteLen
SafeArrayUnaccessData

ole32

OleUninitialize
RevokeDragDrop
CoInitializeEx
CoReleaseMarshalData
CoInitialize
CoGetInterfaceAndReleaseStream
CoRegisterMessageFilter
StgOpenStorage
CoSetProxyBlanket
PropVariantClear
CoDisconnectObject

version

GetFileVersionInfoA
VerQueryValueA
VerQueryValueW
GetFileVersionInfoSizeA
GetFileVersionInfoW
VerLanguageNameA
VerInstallFileA
VerInstallFileW

user32

SendDlgItemMessageA
GetScrollRange
ScrollWindow
CloseClipboard
ScreenToClient
DrawIcon
SetCursor
GetCursorPos
SetCapture

comctl32

ImageList_LoadImageA
CreatePropertySheetPageA
ImageList_Add
ImageList_LoadImageW
ImageList_Read
ImageList_Draw
ImageList_DragEnter
ImageList_Create

shell32

SHGetSpecialFolderPathA
SHChangeNotify
SHGetPathFromIDListA
SHBindToParent
SHGetDiskFreeSpaceExW
ExtractIconExA

advapi32

RegOpenKeyW
LookupPrivilegeValueA
CloseServiceHandle
GetUserNameA
RegEnumValueW
EqualSid
RegCreateKeyExW
CryptDestroyHash
RegCreateKeyA
RegEnumKeyExA
RegQueryInfoKeyW

Sections

.text
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 18KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 95KB - Virtual size: 95KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fcf914004447bbd3b21cd7dd0d7b7d2d

Headers

File Characteristics

Imports

kernel32

msvcrt

gdi32

oleaut32

ole32

version

user32

comctl32

shell32

advapi32

Sections

.text Size: 18KB - Virtual size: 17KB

.data Size: 18KB - Virtual size: 41KB

.rsrc Size: 95KB - Virtual size: 95KB

.text
Size: 18KB - Virtual size: 17KB

.data
Size: 18KB - Virtual size: 41KB

.rsrc
Size: 95KB - Virtual size: 95KB