786b8225a8453d3998f9586dfdd6937b_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

786b8225a8453d3998f9586dfdd6937b_JaffaCakes118
Size

88KB
MD5

786b8225a8453d3998f9586dfdd6937b
SHA1

377015d1f8b8813e3c60ff19db87796979303d31
SHA256

a179acfdf99a6730c341af333dadefe7011576c807d7304bfdc7e7b8221540f9
SHA512

0e6e48572ba3a241346c5e4533d8f716088ec3a424634093cd6a75c1acbadfa11092bd57254ba28b7cd682a8c77d9bf5ee145253148787bef896902e19f14fa3
SSDEEP

1536:hJAmjel69003XMNGRYyHxd9G7jy3h2Tkeqhjw5ux1ucRvmWtbOfHwqwpPk46T:oHlAnXMIDRfEbwVjw8/uGvDtIHwqwpPI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
786b8225a8453d3998f9586dfdd6937b_JaffaCakes118

Files

786b8225a8453d3998f9586dfdd6937b_JaffaCakes118
.exe windows:5 windows x86 arch:x86

e029150f5445a3f6e06329593ed0e564

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

user32

UnhookWindowsHookEx
GetMessageA
SetWindowPos
GetSubMenu
FrameRect
PostQuitMessage
GetScrollPos
EqualRect
GetSysColorBrush
SetWindowTextA
GetSysColor
EnumWindows
EnableMenuItem

kernel32

GetStartupInfoA
SetUnhandledExceptionFilter
VirtualAllocEx
GetTimeZoneInformation
GetSystemTime
GetCurrentProcessId
GetTickCount
InterlockedExchange
ExitProcess
GetACP
GetTempPathA
GetFileAttributesA
GetThreadLocale
FileTimeToSystemTime
RtlUnwind

gdi32

FillRgn
SetViewportExtEx
CreateICW
CreateCompatibleBitmap
GetMapMode
DPtoLP
ExcludeClipRect
SelectClipPath
CopyEnhMetaFileA

ole32

DoDragDrop
CoCreateInstance
CoInitializeSecurity
OleRun
CoTaskMemRealloc
StgOpenStorage
CoRevokeClassObject
CoInitialize
StringFromGUID2

advapi32

GetSecurityDescriptorDacl
FreeSid
RegCreateKeyA
RegCreateKeyExW
AdjustTokenPrivileges
CheckTokenMembership
QueryServiceStatus
RegQueryValueExW
GetUserNameA
CryptHashData

msvcrt

_strdup
iswspace
__initenv
strncpy
strlen
signal
strcspn
_lock
__getmainargs
_CIpow
__setusermatherr
_mbscmp
fprintf
_fdopen
puts
raise
_flsbuf
fflush

comctl32

ImageList_GetBkColor
ImageList_DragEnter
ImageList_SetIconSize
ImageList_DrawEx
ImageList_Destroy
InitCommonControls
ImageList_LoadImageA
CreatePropertySheetPageA
ImageList_LoadImageW
ImageList_Write
ImageList_GetIcon
ImageList_ReplaceIcon
ImageList_GetIconSize

shell32

CommandLineToArgvW
DoEnvironmentSubstW
ShellExecuteW
SHBrowseForFolderA
DragQueryFileA
SHGetPathFromIDList
DragQueryFileW
ExtractIconW
ShellExecuteEx
DragAcceptFiles
ExtractIconExW

oleaut32

SafeArrayCreate
VariantCopy
SafeArrayGetUBound
SafeArrayRedim
SafeArrayUnaccessData
SafeArrayPutElement
SafeArrayPtrOfIndex
SysReAllocStringLen

Sections

.text
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 45KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

e029150f5445a3f6e06329593ed0e564

Headers

File Characteristics

Imports

user32

kernel32

gdi32

ole32

advapi32

msvcrt

comctl32

shell32

oleaut32

Sections

.text Size: 36KB - Virtual size: 36KB

.data Size: 45KB - Virtual size: 44KB

.rsrc Size: 6KB - Virtual size: 34KB

.text
Size: 36KB - Virtual size: 36KB

.data
Size: 45KB - Virtual size: 44KB

.rsrc
Size: 6KB - Virtual size: 34KB