6f2d2cc978c6cba3daff95805d71bcf9_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

6f2d2cc978c6cba3daff95805d71bcf9_JaffaCakes118
Size

181KB
MD5

6f2d2cc978c6cba3daff95805d71bcf9
SHA1

36630fad24085663d3791144b2ae8e220dbfaab8
SHA256

c2fbc0f21aae868fabb4dabc5a0313b69cc2329045b2fd0090f5e625c706909d
SHA512

c309215c552d8f488af6569510ffe43cee268d278cb40744b7d61a34280edafe446aba32ac5bc0c59f38f6a26187130cf4503945b8f419996cb8feedfaa0e3ea
SSDEEP

3072:PXS+XJdvFIqU7zDmZGOfYvGnQw+ZOmMU4edB1o3dWlULRbFqrjATAz:PCCIqUPwGXvGnQBOmPtAdWYFC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6f2d2cc978c6cba3daff95805d71bcf9_JaffaCakes118

Files

6f2d2cc978c6cba3daff95805d71bcf9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

24bf3fe6bc5204a7d22a6f9b7a576530

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

ole32

GetHGlobalFromILockBytes
StgOpenStorageOnILockBytes
CLSIDFromProgID
OleRun
ProgIDFromCLSID
CoTaskMemAlloc
RevokeDragDrop
CoCreateInstance
CoGetMalloc
CreateStreamOnHGlobal
CoGetClassObject
CoFreeUnusedLibraries
StringFromCLSID
StgCreateDocfileOnILockBytes
OleGetAutoConvert
GetHGlobalFromStream
ReleaseStgMedium
OleRegGetUserType
CLSIDFromString
CoTaskMemFree
RegisterDragDrop
CoCreateGuid
OleDuplicateData
CreateILockBytesOnHGlobal

comctl32

ImageList_DrawEx
ImageList_GetIconSize
ImageList_Add
ImageList_Create
ImageList_Destroy

rpcrt4

RpcBindingFromStringBindingA
RpcStringBindingComposeA
NdrClientCall
RpcBindingSetAuthInfoA
RpcStringFreeA

gdi32

PlgBlt
CreateFontIndirectA
GetBitmapBits
SetTextColor
StrokePath
ExtCreatePen
RoundRect
SetStretchBltMode
GetBkColor
PolyBezier
FlattenPath
AnimatePalette
GetPath
CreatePen
SetDIBits

comdlg32

GetFileTitleA

kernel32

FileTimeToSystemTime
LockFile
GetFileAttributesA
CreateFiber
FindResourceExA
GetFileType
FileTimeToLocalFileTime
GetUserDefaultLangID
SetCommConfig
SearchPathW
CompareStringW
GetVolumeInformationW
UnlockFile
EnumResourceNamesW
GetFileTime
IsDBCSLeadByte
GetSystemTime
FlushFileBuffers
VerLanguageNameW
LocalAlloc
GetProfileStringW
SetEndOfFile
FlushFileBuffers
GetVersionExW
GetSystemDirectoryW

user32

RegisterClassW
WinHelpW
ToAscii
GetSysColorBrush
ClipCursor
MonitorFromWindow
SetScrollRange
SetWindowsHookExW
DefWindowProcW
CallNextHookEx
DestroyCursor
DestroyIcon
EmptyClipboard
IsClipboardFormatAvailable
SetClipboardData
ChildWindowFromPoint
UnhookWindowsHookEx
DrawEdge
SetWindowPos
GetSysColor

shlwapi

PathIsRootW
PathIsURLW
PathStripToRootW
PathIsRelativeW
PathCanonicalizeW
PathCombineW

Sections

.text
Size: 156KB - Virtual size: 155KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.lib
Size: 512B - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

24bf3fe6bc5204a7d22a6f9b7a576530

Headers

File Characteristics

Imports

ole32

comctl32

rpcrt4

gdi32

comdlg32

kernel32

user32

shlwapi

Sections

.text Size: 156KB - Virtual size: 155KB

.rdata Size: 3KB - Virtual size: 2KB

.data Size: 20KB - Virtual size: 20KB

.lib Size: 512B - Virtual size: 76KB

.text
Size: 156KB - Virtual size: 155KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 20KB - Virtual size: 20KB

.lib
Size: 512B - Virtual size: 76KB