962391afe2ac596e3f3978a8455e2c62_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

962391afe2ac596e3f3978a8455e2c62_JaffaCakes118
Size

103KB
MD5

962391afe2ac596e3f3978a8455e2c62
SHA1

8ea5515d4ff5b66aa0acba8eaaf75d5a2601a33a
SHA256

9d27221cbbb224972a3e957170ec7deafd953dc2cbd9e92bd4bcfb6feb766c68
SHA512

7a6a69c18d0f3f49b16813fff4a44e2c2345cf0789c693af7c9009ab1d3d5e37d1a642dc6336bd2840dc7c67ebbd228acf41612f2056eb98eb05eec032a4a486
SSDEEP

1536:IQ6B7UTGLw+0+7+NxYYKZI0/N1PKizmmA21w382oOItmOZN1fE5bd9:IQCcd+37+3bs13am8loltmOZvs5b

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
962391afe2ac596e3f3978a8455e2c62_JaffaCakes118

Files

962391afe2ac596e3f3978a8455e2c62_JaffaCakes118
.exe windows:4 windows x86 arch:x86

afeec39073a7410811ba1234f937ca8f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

ImageList_Read
ImageList_GetImageInfo
ImageList_DragMove
ImageList_GetIcon
ImageList_AddIcon
ImageList_GetIconSize
ImageList_Replace
ImageList_Copy
ImageList_LoadImageW
ImageList_GetImageCount
ImageList_DragLeave
ImageList_Draw
ImageList_DrawEx
ImageList_LoadImageA
ImageList_ReplaceIcon
ImageList_GetDragImage
ImageList_LoadImage
InitCommonControls
ImageList_DragShowNolock
ImageList_Remove

user32

GetDC
GetDlgItem
CopyRect
AppendMenuA
GetCursor
CopyImage
EndDialog
CloseWindow
IsWindow
LoadMenuA
DrawTextA
IsMenu
CalcMenuBar
GetWindowTextA
CopyIcon
GetMenu
DrawTextW
InsertMenuA
AppendMenuW
GetFocus
IsWindow
DrawTextW
AlignRects
IsMenu
DialogBoxParamA
GetWindowTextA
DialogBoxParamW
CloseWindow
GetWindowTextLengthA
InsertMenuA
EndDialog
GetDlgItem
AppendMenuA
CopyRect
DrawTextA
LoadCursorA
GetFocus

advapi32

RegReplaceKeyA
RegCreateKeyW
RegEnumValueA
RegDeleteKeyA
RegEnumKeyA
RegLoadKeyW
RegEnumValueW
RegEnumKeyW
RegOpenKeyExA
RegQueryValueExA
RegQueryInfoKeyA
RegQueryValueExW
RegOpenKeyExW
RegDeleteValueW
RegLoadKeyA
RegQueryValueA

kernel32

GetLastError
DeleteFileA
GetFileType
GlobalFree
FreeLibrary
GetCPInfo
lstrcpyA
GetStringTypeA
HeapAlloc
lstrlenA
GlobalAlloc
GetModuleHandleA
CloseHandle
GetDateFormatA
GetModuleFileNameA
GetLocalTime

Sections

.text
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.ddata
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gdata
Size: 3KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xMbQIs
Size: - Virtual size: 232B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.YZnmXU
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

afeec39073a7410811ba1234f937ca8f

Headers

File Characteristics

Imports

comctl32

user32

advapi32

kernel32

Sections

.text Size: 14KB - Virtual size: 13KB

.ddata Size: 25KB - Virtual size: 24KB

.gdata Size: 3KB - Virtual size: 44KB

.xMbQIs Size: - Virtual size: 232B

.YZnmXU Size: 2KB - Virtual size: 1KB

.text
Size: 14KB - Virtual size: 13KB

.ddata
Size: 25KB - Virtual size: 24KB

.gdata
Size: 3KB - Virtual size: 44KB

.xMbQIs
Size: - Virtual size: 232B

.YZnmXU
Size: 2KB - Virtual size: 1KB