87f4e8aef33ef415a438ca3a171f3a15_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

87f4e8aef33ef415a438ca3a171f3a15_JaffaCakes118
Size

148KB
MD5

87f4e8aef33ef415a438ca3a171f3a15
SHA1

cbfa92263f06c2e9e908be13827bf2587dda3452
SHA256

2c3fb47571cd4a4544e0afe2005605766eac1c9106e056426626418ccb57395a
SHA512

2871388ffe43e45f48f1cc6cf74efbeae52c4b4d34ff14ab05f71705609a5c4cb58fef4cecf7e7d1935e6b8d674ab8679a68e6938a4ed1a7186f02ac76fa439b
SSDEEP

3072:rVJb/EZOTaNW/jdE4h2SDuBPYA8mPVZkgY2ckLEGFVnj+SVg:RJbZTCvpTocck4GFVj3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
87f4e8aef33ef415a438ca3a171f3a15_JaffaCakes118

Files

87f4e8aef33ef415a438ca3a171f3a15_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1fe35257488ff6ecfe3539f2c584b7af

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetCurrentProcessId
CreateFileMappingA
QueryPerformanceCounter
GetStartupInfoA
GetModuleHandleA
VirtualProtect
WideCharToMultiByte
GetEnvironmentStringsW

user32

SetActiveWindow
GetWindowThreadProcessId
GetSysColor
GetParent
GetMessagePos
LoadStringA
GetWindowLongA
SendDlgItemMessageA

msvcrt

log10
_XcptFilter
__p__commode
getenv
_adjust_fdiv
putchar
fread
_initterm
_vsnprintf
_getch
__setusermatherr
__p__fmode
_acmdln
_pctype
__getmainargs
__p__environ
localtime
localeconv
__set_app_type
exit
_except_handler3

shell32

SHCreateDirectoryExA
SHGetFolderLocation
Shell_NotifyIconW
SHGetDesktopFolder
ExtractIconExA
DragQueryFileW
SHGetSpecialFolderPathA

ole32

CLSIDFromProgID
IsEqualGUID
CreateStreamOnHGlobal
OleIsCurrentClipboard
OleFlushClipboard
CLSIDFromString
OleInitialize
CoGetClassObject
CoRegisterClassObject
CoFreeUnusedLibraries
StgOpenStorageOnILockBytes

advapi32

CheckTokenMembership
RegCreateKeyA
OpenServiceA
RegEnumValueW
CryptAcquireContextA

comctl32

ImageList_SetImageCount
ImageList_SetOverlayImage
ImageList_DragShowNolock
ImageList_GetIconSize
CreatePropertySheetPageA
ImageList_GetBkColor
CreateToolbarEx
ImageList_GetImageInfo
ImageList_DragEnter
PropertySheetW

oleaut32

SafeArrayRedim
SysStringLen
GetErrorInfo
SafeArrayPtrOfIndex
SysStringByteLen
CreateErrorInfo
SafeArrayGetElement
SetErrorInfo
VariantInit

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 136KB - Virtual size: 136KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

1fe35257488ff6ecfe3539f2c584b7af

Headers

File Characteristics

Imports

kernel32

user32

msvcrt

shell32

ole32

advapi32

comctl32

oleaut32

Sections

.text Size: 4KB - Virtual size: 4KB

.rdata Size: 136KB - Virtual size: 136KB

.data Size: 6KB - Virtual size: 5KB

.text
Size: 4KB - Virtual size: 4KB

.rdata
Size: 136KB - Virtual size: 136KB

.data
Size: 6KB - Virtual size: 5KB