85f568820c3b35c9cc0a7a5b9f348730_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

85f568820c3b35c9cc0a7a5b9f348730_JaffaCakes118
Size

91KB
MD5

85f568820c3b35c9cc0a7a5b9f348730
SHA1

8643dd918ac7112c9d9426adf2e2edb2c3b1ef5a
SHA256

c043be1c69e356ae261357913d855e97daccee02129320d69ff7e085073c2827
SHA512

d180b20a718e838c2a6fcfa9a1f5f6c036d98111eddf8f832303ea2fac1c6fc12881b3660da9b8fc39e9524aeb3cd246a4e0c24bd47ce2be11478058cf9603e0
SSDEEP

1536:KdLEO4TeqI4D/w/S8yYVDcBuuYSQMxZXB448oIO7V2TXbE59sVg0xdy7sdA:gfsewY/S8y4Qh5L58AKXbnfdywO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
85f568820c3b35c9cc0a7a5b9f348730_JaffaCakes118

Files

85f568820c3b35c9cc0a7a5b9f348730_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d9cd2998f0c38d3fea6a798ada797c37

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CalcMenuBar
CreateIcon
CopyRect
EndDialog
DrawTextW
IsWindow
GetCursor
GetWindowTextLengthA
GetDlgItem
CloseWindow
GetWindowTextA
LoadCursorA
DrawIcon
AppendMenuW
AlignRects
BlockInput
DrawTextA
InsertMenuA
GetFocus
CloseWindow
DialogBoxParamA
BlockInput
CreateIcon
GetDlgItem
GetFocus
LoadMenuA
IsWindow
CopyImage
AlignRects
GetMenu
GetDC
GetWindowTextA
DialogBoxParamW
EndDialog
DrawIcon

comctl32

ImageList_GetImageRect
ImageList_AddIcon
InitCommonControls
ImageList_GetIconSize
ImageList_GetDragImage
ImageList_LoadImageA
ImageList_DragEnter
ImageList_Create
ImageList_DragShowNolock
ImageList_LoadImage
ImageList_Draw
ImageList_Copy
ImageList_Merge
ImageList_Destroy
ImageList_DrawIndirect
ImageList_Remove
ImageList_GetImageCount

kernel32

GetStdHandle
GlobalFree
GetModuleHandleA
DeleteFileA
CloseHandle
GetFileSize
GetStringTypeA
lstrcatA
HeapAlloc
GetCommandLineA
GetDateFormatA
Sleep
lstrcmpA
SetLastError
GetFileAttributesA
lstrcpyA
WideCharToMultiByte
lstrcpynA
GetLastError

advapi32

RegReplaceKeyA
RegQueryValueExW
RegQueryValueExA
RegOpenKeyA
RegEnumKeyExA
RegDeleteKeyA
RegQueryValueW
RegGetKeySecurity
RegReplaceKeyW
RegOpenKeyW
RegOpenKeyExA
RegLoadKeyA
RegCreateKeyW
RegQueryInfoKeyW
RegDeleteKeyW
RegQueryValueA
RegQueryInfoKeyA
RegCreateKeyExA
RegEnumKeyA
RegEnumKeyExW

Sections

.nTiUvD
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.oMoA
Size: 65KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.GPTKV
Size: 6KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MSIF
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ

.gZzOLe
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d9cd2998f0c38d3fea6a798ada797c37

Headers

File Characteristics

Imports

user32

comctl32

kernel32

advapi32

Sections

.nTiUvD Size: 14KB - Virtual size: 13KB

.oMoA Size: 65KB - Virtual size: 65KB

.GPTKV Size: 6KB - Virtual size: 61KB

.MSIF Size: - Virtual size: 3KB

.gZzOLe Size: 1KB - Virtual size: 1KB

.nTiUvD
Size: 14KB - Virtual size: 13KB

.oMoA
Size: 65KB - Virtual size: 65KB

.GPTKV
Size: 6KB - Virtual size: 61KB

.MSIF
Size: - Virtual size: 3KB

.gZzOLe
Size: 1KB - Virtual size: 1KB