83915750146a96a1e51d4e5de16caec3_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

83915750146a96a1e51d4e5de16caec3_JaffaCakes118
Size

218KB
MD5

83915750146a96a1e51d4e5de16caec3
SHA1

645a8776287c2ca3ad4634ace5d6d6ad1e926879
SHA256

0b2a47a7f0d504009d4c08b154665ccaaee06f25f74af62eac6318c30fbac66a
SHA512

8e1e3dbb4441c7b941d25804e65515476e13d54ada4b76f10b63413696aece63ffcf83a4aed1adbd79c4a7328d6f738024a517fb8c7f9c81f5fe796cbca85a69
SSDEEP

6144:XHDI3UJ1rCshMTIyGty174K66mno4U6S:XjI3cNCs6Uyfn66mno4UP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
83915750146a96a1e51d4e5de16caec3_JaffaCakes118

Files

83915750146a96a1e51d4e5de16caec3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1d286c77bbe013eee8d706b5818c52e5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

oleaut32

SysReAllocStringLen
SafeArrayCreate
VariantChangeType
SafeArrayPtrOfIndex
SysFreeString
OleLoadPicture
RegisterTypeLib
SafeArrayUnaccessData
SafeArrayGetElement

comctl32

ImageList_Write
ImageList_DragShowNolock
ImageList_Add

shell32

SHGetFolderPathA
DragQueryFileA

version

VerInstallFileA
VerQueryValueA

user32

DefWindowProcA
WaitMessage

gdi32

GetObjectA
GetDCOrgEx
SetBkMode
GetPixel
GetClipBox
GetDIBits

shlwapi

PathIsContentTypeA
SHQueryInfoKeyA
SHStrDupA
SHEnumValueA

advapi32

RegOpenKeyA

kernel32

EnterCriticalSection
GetCommandLineA
IsBadReadPtr
GetCommandLineW
GetProcAddress
GetTickCount
SetLastError
ExitThread
LoadLibraryA
GetACP
ExitProcess
VirtualAllocEx
FindFirstFileA
GetVersionExA
GetModuleHandleA
GlobalAlloc
MoveFileA
VirtualAlloc
GetThreadLocale
lstrcmpiA
GetOEMCP
LocalAlloc

Sections

.text
Size: 65KB - Virtual size: 65KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 141KB - Virtual size: 141KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RSRC8
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RSRC4
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.RSRC0
Size: 1024B - Virtual size: 992B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RSRC6
Size: 1024B - Virtual size: 998B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RSRC3
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RSRC1
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 924B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1d286c77bbe013eee8d706b5818c52e5

Headers

File Characteristics

Imports

oleaut32

comctl32

shell32

version

user32

gdi32

shlwapi

advapi32

kernel32

Sections

.text Size: 65KB - Virtual size: 65KB

DATA Size: 141KB - Virtual size: 141KB

.RSRC8 Size: 2KB - Virtual size: 1KB

.RSRC4 Size: 1KB - Virtual size: 1KB

.RSRC0 Size: 1024B - Virtual size: 992B

.RSRC6 Size: 1024B - Virtual size: 998B

.RSRC3 Size: 1KB - Virtual size: 1KB

.RSRC1 Size: 2KB - Virtual size: 1KB

.rsrc Size: 1024B - Virtual size: 924B

.text
Size: 65KB - Virtual size: 65KB

DATA
Size: 141KB - Virtual size: 141KB

.RSRC8
Size: 2KB - Virtual size: 1KB

.RSRC4
Size: 1KB - Virtual size: 1KB

.RSRC0
Size: 1024B - Virtual size: 992B

.RSRC6
Size: 1024B - Virtual size: 998B

.RSRC3
Size: 1KB - Virtual size: 1KB

.RSRC1
Size: 2KB - Virtual size: 1KB

.rsrc
Size: 1024B - Virtual size: 924B