892e4e892f0c0e41f38b686990e0a19c_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

892e4e892f0c0e41f38b686990e0a19c_JaffaCakes118
Size

148KB
MD5

892e4e892f0c0e41f38b686990e0a19c
SHA1

4dc4b14522bda5af52d0e7f6f7dadecc715b2e9e
SHA256

d06f9eabaa66e6bc64504d989d7be0cf41c2be892d7ec82e1a6bad29dc994787
SHA512

449950eb71401dd9689ed81e0ded511ec7af5a4c023c5906499fd6845fe9b081772018121dfa160a210f61ad2c06b632dd2e4b081be63f0df5c84ef22ae8fbd2
SSDEEP

3072:10T2NZF4kA9dKHJ671CgdFWRZlcmqKzhysR6SG1q:uTAYQLlcLs4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
892e4e892f0c0e41f38b686990e0a19c_JaffaCakes118

Files

892e4e892f0c0e41f38b686990e0a19c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a71b70e4855a46e2b80101f522ef2ab8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

ExpandEnvironmentStringsA
CompareStringW
LCMapStringA
GetOEMCP
GetSystemTime
GetPrivateProfileStringA
GetStartupInfoA
GetLastError
VirtualProtect
UnhandledExceptionFilter
GetCurrentDirectoryA
GetModuleHandleA
FormatMessageA
lstrcpyA
CreateDirectoryA
GlobalAlloc

user32

FillRect
SetCursor
GetSysColor
ReleaseCapture
IsRectEmpty
SetActiveWindow
InsertMenuA
GetWindowThreadProcessId

msvcrt

log10
_acmdln
_adjust_fdiv
puts
__p__commode
_filbuf
wcscmp
wcscat
malloc
_except_handler3
__setusermatherr
iswdigit
_initterm
__getmainargs
__dllonexit
_XcptFilter
__p__fmode
isxdigit
__set_app_type
__CxxFrameHandler
_vsnwprintf
exit
_kbhit
_fullpath

ole32

CreateILockBytesOnHGlobal
CreateItemMoniker
CoGetClassObject
CoReleaseMarshalData
OleSetMenuDescriptor
CoTaskMemRealloc

comctl32

ImageList_GetBkColor
ImageList_GetIconSize
ImageList_Draw
DestroyPropertySheetPage
ImageList_Replace
CreateStatusWindowA
PropertySheetA
ImageList_LoadImageW
ImageList_GetImageCount
InitializeFlatSB
ImageList_SetOverlayImage

advapi32

CryptGenRandom
RegDeleteKeyA
OpenSCManagerA
RegOpenKeyW
CryptHashData
RegOpenKeyA
CheckTokenMembership
QueryServiceStatus
RegSetValueExW
CloseServiceHandle

shell32

SHGetSpecialFolderPathW
SHGetPathFromIDListW
DoEnvironmentSubstW
SHGetDiskFreeSpaceExW
FindExecutableW
SHGetFolderPathA
ExtractIconA
SHGetSpecialFolderLocation
SHGetFolderLocation

oleaut32

SysStringByteLen
SafeArrayGetUBound
GetActiveObject
CreateErrorInfo

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 136KB - Virtual size: 136KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

a71b70e4855a46e2b80101f522ef2ab8

Headers

File Characteristics

Imports

kernel32

user32

msvcrt

ole32

comctl32

advapi32

shell32

oleaut32

Sections

.text Size: 4KB - Virtual size: 4KB

.rdata Size: 136KB - Virtual size: 136KB

.data Size: 6KB - Virtual size: 5KB

.text
Size: 4KB - Virtual size: 4KB

.rdata
Size: 136KB - Virtual size: 136KB

.data
Size: 6KB - Virtual size: 5KB