7578dc1774c5bfdbfc85d8a9fa3e942e_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

7578dc1774c5bfdbfc85d8a9fa3e942e_JaffaCakes118
Size

83KB
MD5

7578dc1774c5bfdbfc85d8a9fa3e942e
SHA1

80f6060d4c240346de063cf79f524ed8524d5c20
SHA256

b6e7834f56cc8088a9a1e2c675ab962380f817fdf72999bb27d300ec8a050144
SHA512

a487ee78302281deecb00c862672f87f9bbd8aaf128e6ece3bd48e6ea738cb65f63e6e42d578af774b925ef3ef35b3baa5819f215bd812cbb3225f735d11d578
SSDEEP

1536:EBAi1ihrhNkiHxaLuDzDskkAEJ1OO6P8RS1ngjgIgzfU1SXVBpBIW5uB2Whf1gTL:e2rhNkiHxSKs590O6P8Rg0gIgzsEVP6C

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7578dc1774c5bfdbfc85d8a9fa3e942e_JaffaCakes118

Files

7578dc1774c5bfdbfc85d8a9fa3e942e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0797508126e5a78c4b55a8b3156176a8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

user32

GetMessageA
FrameRect
GetScrollPos
PostQuitMessage
GetSubMenu
UnhookWindowsHookEx
SetWindowTextA
EnableMenuItem
EqualRect
EnumWindows
GetSysColorBrush
GetSysColor
SetWindowPos

kernel32

GetFileAttributesA
QueryPerformanceCounter
GetSystemTime
RtlUnwind
InterlockedExchange
SetUnhandledExceptionFilter
GetStartupInfoA
GetTempPathA
GetCurrentProcessId
GetThreadLocale
GetTickCount
GetACP
GetTimeZoneInformation
ExitProcess
FileTimeToSystemTime
GetOEMCP
VirtualAllocEx

gdi32

FillRgn
SelectClipPath
CreateCompatibleBitmap
SetViewportExtEx
DPtoLP
CopyEnhMetaFileA
GetMapMode
ExcludeClipRect
CreateICW

ole32

DoDragDrop
StgOpenStorage
OleRun
StringFromGUID2
CoRevokeClassObject
CoInitialize
CoCreateInstance
CoTaskMemRealloc
CoInitializeSecurity

advapi32

QueryServiceStatus
RegCreateKeyExW
FreeSid
CheckTokenMembership
RegQueryValueExW
GetUserNameA
AdjustTokenPrivileges
GetSecurityDescriptorDacl
CryptHashData
RegCreateKeyA

msvcrt

_mbscmp
_strdup
strlen
__setusermatherr
strncpy
_lock
raise
signal
__initenv
puts
_fdopen
_flsbuf
_CIpow
strcspn
fflush
fprintf
__getmainargs
iswspace

comctl32

ImageList_DrawEx
CreatePropertySheetPageA
ImageList_GetBkColor
ImageList_SetIconSize
ImageList_ReplaceIcon
ImageList_GetIconSize
ImageList_DragEnter
ImageList_LoadImageA
ImageList_GetIcon
InitCommonControls
ImageList_Destroy
ImageList_Write
ImageList_LoadImageW

shell32

ShellExecuteW
SHGetPathFromIDList
DragQueryFileA
SHBrowseForFolderA
ExtractIconW
DragQueryFileW
ShellExecuteEx
CommandLineToArgvW
DragAcceptFiles
DoEnvironmentSubstW
ExtractIconExW

oleaut32

SafeArrayUnaccessData
SafeArrayPutElement
VariantCopy
SafeArrayPtrOfIndex
SafeArrayGetUBound
SysReAllocStringLen
SafeArrayCreate
SafeArrayRedim

Sections

.text
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

0797508126e5a78c4b55a8b3156176a8

Headers

File Characteristics

Imports

user32

kernel32

gdi32

ole32

advapi32

msvcrt

comctl32

shell32

oleaut32

Sections

.text Size: 35KB - Virtual size: 34KB

.data Size: 41KB - Virtual size: 41KB

.rsrc Size: 6KB - Virtual size: 84KB

.text
Size: 35KB - Virtual size: 34KB

.data
Size: 41KB - Virtual size: 41KB

.rsrc
Size: 6KB - Virtual size: 84KB