7671e9af4871ac4d9e5db8a9486049df_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

7671e9af4871ac4d9e5db8a9486049df_JaffaCakes118
Size

106KB
MD5

7671e9af4871ac4d9e5db8a9486049df
SHA1

2a5d504c7c0faecea84a82cce36b502631a79a70
SHA256

e30a30900dcc34e426143d1ed43c0ffd1e2fc94eeea034fbabf8e219abf1241b
SHA512

9ce92705381c19500960d399af9c3c256a0375bdfc93bf588d97f709f7fab143ea7dc304e9afb02a7f4813a006b34a61371dbf645de7e4345a2f019250d45f28
SSDEEP

1536:PfdKR22ETxbItusOFvLFn0nF6UWuhagoz7B44GTnjg0ih46ihgWFLaDu5FlmQ41:Pf4R2BdItmDF0nFAgUW1ihDA/lR41

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7671e9af4871ac4d9e5db8a9486049df_JaffaCakes118

Files

7671e9af4871ac4d9e5db8a9486049df_JaffaCakes118
.exe windows:4 windows x86 arch:x86

139b7195b44eea7def048f4f0bff4868

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

VirtualFree
GetFileType
GetStringTypeW
GetDateFormatA
RaiseException
DeviceIoControl
GetExitCodeProcess
GetTempPathW
VirtualProtect
CompareStringW
GetFileAttributesA
GetModuleHandleA
IsDBCSLeadByte
GetStartupInfoA

user32

GetClassNameA
GetScrollPos
GetWindowPlacement
GetMenuState
GetWindowRect
GetFocus
SendDlgItemMessageA
GetIconInfo
DeleteMenu
PostMessageA
GetSysColor
CreateWindowExA

msvcrt

fprintf
__p__commode
_initterm
exit
_beginthreadex
__setusermatherr
_umask
ftell
_except_handler3
sqrt
_acmdln
__getmainargs
longjmp
signal
__p__fmode
_adjust_fdiv
_XcptFilter
wcscspn
__set_app_type
putchar

shell32

SHBrowseForFolderA
SHGetFileInfo
SHGetFileInfoA
SHGetFolderLocation
ExtractIconW

ole32

CLSIDFromString
StringFromIID
CoDisconnectObject
CoSetProxyBlanket
CoGetInterfaceAndReleaseStream
CoReleaseMarshalData
StgCreateDocfileOnILockBytes
OleDraw
OleFlushClipboard
OleSetClipboard
IsAccelerator
CoInitialize
OleIsCurrentClipboard
RegisterDragDrop

advapi32

RegEnumKeyW
RegCreateKeyA
RegEnumValueW
OpenSCManagerA
EqualSid
CryptCreateHash
CheckTokenMembership

comctl32

ImageList_Read
ImageList_Remove
ImageList_DragEnter
InitializeFlatSB
ImageList_SetBkColor
InitCommonControls
ImageList_Create
ImageList_GetImageCount

oleaut32

SysStringByteLen
SafeArrayGetElement
SysFreeString
SafeArrayRedim

Sections

.text
Size: 75KB - Virtual size: 75KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

139b7195b44eea7def048f4f0bff4868

Headers

File Characteristics

Imports

kernel32

user32

msvcrt

shell32

ole32

advapi32

comctl32

oleaut32

Sections

.text Size: 75KB - Virtual size: 75KB

.data Size: 4KB - Virtual size: 3KB

.rsrc Size: 25KB - Virtual size: 25KB

.text
Size: 75KB - Virtual size: 75KB

.data
Size: 4KB - Virtual size: 3KB

.rsrc
Size: 25KB - Virtual size: 25KB