85c6a68268ded53b643babdd55bea465_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

85c6a68268ded53b643babdd55bea465_JaffaCakes118
Size

147KB
MD5

85c6a68268ded53b643babdd55bea465
SHA1

8e958d591bf275e2ba1d54d0b4f7266522f08f29
SHA256

9ee03cbbe32a086109d63a7cacdc0a15973ddc716d117d36d47fa62e06bf36dd
SHA512

9b42ac48ff8878f0ee58eb3be0a27aa9c73a4490a7fa8d3a117c56b2f792bb918a914c23b61f9deab5f7458715559618e2df6a4d4c56e8bb55bb2f74f05459cd
SSDEEP

3072:jNtG4MEsT169edogcCA06Pm50yknqvPhQNElQ8mfV73zol:3GkFNnYh4Es0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
85c6a68268ded53b643babdd55bea465_JaffaCakes118

Files

85c6a68268ded53b643babdd55bea465_JaffaCakes118
.exe windows:4 windows x86 arch:x86

fafe29c6866cd430d5b0e96b03f173a4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

IsBadCodePtr
GetTempFileNameA
GetDriveTypeA
GetStartupInfoA
DuplicateHandle
SetThreadLocale
WritePrivateProfileStringA
VirtualProtect
GetLocalTime
GetModuleHandleA
LocalFileTimeToFileTime

user32

FindWindowA
GetScrollRange
GetClassNameA
GetSystemMenu
OpenClipboard
CreatePopupMenu
DrawIcon
GetSysColor
IsChild
DrawEdge
GetWindow

msvcrt

log10
strstr
_getcwd
_adjust_fdiv
_initterm
wcsstr
__p__commode
clearerr
__getmainargs
fread
_XcptFilter
log
wcstoul
_except_handler3
__p__fmode
__set_app_type
__setusermatherr
clock
exit
_acmdln

shell32

SHGetSpecialFolderPathA
DragQueryFileW
SHGetPathFromIDListA
DragAcceptFiles
SHGetSpecialFolderLocation
ShellExecuteA

ole32

CoRevokeClassObject
IsAccelerator
CoFreeUnusedLibraries
OleGetClipboard
IsEqualGUID
CoTaskMemAlloc
ReleaseStgMedium
CoRegisterMessageFilter
RevokeDragDrop
ProgIDFromCLSID

oleaut32

SysAllocStringByteLen
VariantCopyInd
GetErrorInfo
SafeArrayPtrOfIndex
SafeArrayGetElement
CreateErrorInfo

advapi32

OpenProcessToken
FreeSid
RegQueryValueExA
RegOpenKeyExW
DeregisterEventSource
CryptCreateHash
SetSecurityDescriptorDacl
OpenServiceW
ControlService

comctl32

ImageList_SetOverlayImage
ImageList_LoadImageW
ImageList_GetIcon
ImageList_Create
InitCommonControlsEx

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 135KB - Virtual size: 135KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

fafe29c6866cd430d5b0e96b03f173a4

Headers

File Characteristics

Imports

kernel32

user32

msvcrt

shell32

ole32

oleaut32

advapi32

comctl32

Sections

.text Size: 5KB - Virtual size: 4KB

.rdata Size: 135KB - Virtual size: 135KB

.data Size: 6KB - Virtual size: 5KB

.text
Size: 5KB - Virtual size: 4KB

.rdata
Size: 135KB - Virtual size: 135KB

.data
Size: 6KB - Virtual size: 5KB