8cf1419a6e5772ac9a686ed1f649cd78_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

8cf1419a6e5772ac9a686ed1f649cd78_JaffaCakes118
Size

226KB
MD5

8cf1419a6e5772ac9a686ed1f649cd78
SHA1

25e228bd1aac2fbeb461ec6808d107b810b38104
SHA256

dec52ce567fd874ff212c59be5ac181c9040b096dc8e127201bc6c95a3f3c6f8
SHA512

07ff6f6339d1c21b3041b02f6f54004dcd757abd3805ce7b09cce89589a3ed610dd17cceb234476719e6df3abe3f7d4eee5b9f68d10ba291ff712982f797d2cb
SSDEEP

3072:FqHLnemdjg7KXen32LDS9MWI8oTA3WK7gGWEBcQ3go7Qtfo5MVRr+zMiMvhRMa:cjUOXq32Lb6oNIcQQo95Jz0pR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8cf1419a6e5772ac9a686ed1f649cd78_JaffaCakes118

Files

8cf1419a6e5772ac9a686ed1f649cd78_JaffaCakes118
.exe windows:5 windows x86 arch:x86

63fba2b11101170154542ba282db0d99

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

AdjustTokenPrivileges
LookupPrivilegeValueW
OpenProcessToken

shell32

SHAddToRecentDocs
SHBindToParent
SHChangeNotify
SHFileOperationW
SHGetDesktopFolder
SHGetFileInfoW
ShellExecuteExW
DragQueryFileW

ntdll

NtClose
NtDeviceIoControlFile

gdi32

DeleteDC
DeleteObject
BitBlt
CreateBitmap
GetObjectW
GetStockObject
CreateCompatibleDC
SelectObject
SetBkColor
SetBkMode
SetTextColor
CreateFontIndirectW

comdlg32

GetSaveFileNameA
GetFileTitleA
GetOpenFileNameA

ole32

CreateStreamOnHGlobal

kernel32

FileTimeToSystemTime
FormatMessageW
FreeLibrary
GetComputerNameExW
GetConsoleMode
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetModuleHandleA
GetPrivateProfileSectionW
GetPrivateProfileStringW
GetProcAddress
GetStdHandle
GetSystemTimeAsFileTime
GetTickCount
GetTimeFormatW
LoadLibraryW
LocalFree
MultiByteToWideChar
QueryPerformanceCounter
ReadConsoleW
ReadFile
SetConsoleMode
SetLastError
SetUnhandledExceptionFilter
TerminateProcess
UnhandledExceptionFilter
VerSetConditionMask
VerifyVersionInfoW
WideCharToMultiByte
WriteConsoleW
WritePrivateProfileSectionW
WritePrivateProfileStringW
lstrcatW
lstrcmpW
lstrcmpiW
lstrcpyW
lstrcpynW
lstrlenW

user32

CharLowerW
LoadStringW
CharUpperW
wsprintfW

comctl32

PropertySheetW
DestroyPropertySheetPage
CreatePropertySheetPageW

Sections

.text
Size: 156KB - Virtual size: 155KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 17KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 11KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

63fba2b11101170154542ba282db0d99

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

shell32

ntdll

gdi32

comdlg32

ole32

kernel32

user32

comctl32

Sections

.text Size: 156KB - Virtual size: 155KB

.rdata Size: 30KB - Virtual size: 29KB

.data Size: 17KB - Virtual size: 32KB

.reloc Size: 11KB - Virtual size: 12KB

.rsrc Size: 10KB - Virtual size: 12KB

.text
Size: 156KB - Virtual size: 155KB

.rdata
Size: 30KB - Virtual size: 29KB

.data
Size: 17KB - Virtual size: 32KB

.reloc
Size: 11KB - Virtual size: 12KB

.rsrc
Size: 10KB - Virtual size: 12KB