9fd969b25db880b2b7966a9b90217db6_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

9fd969b25db880b2b7966a9b90217db6_JaffaCakes118
Size

183KB
MD5

9fd969b25db880b2b7966a9b90217db6
SHA1

139d17f206b81b8b541752cca4b65bedfbfbf748
SHA256

bc786967b0df8df8b05e173ade86de7b2e188a388dc82cb9f31f1bf5fea0c706
SHA512

ebb0e98c21dae0623fda66a7e38983111908995ab3ff538c8d9b45a28535a6857137d72269f4d760d81f667171375de0801e1c29fb59849a0b96505c9618ec8f
SSDEEP

3072:DJdifjwsiethaOKteEtcKtx/QiRH3NXRPtBlEvofWU/30EU/zSV3WhcBkqVrmXr:9diIe6eEWEBNfEvENUbSkcBk2rmb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9fd969b25db880b2b7966a9b90217db6_JaffaCakes118

Files

9fd969b25db880b2b7966a9b90217db6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a7042e24563771cfb945f7e3c0b9084c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

shlwapi

PathCanonicalizeW
PathIsRelativeW
PathIsRootW
PathIsURLW
PathStripToRootW
PathCombineW

gdi32

CreatePen
FlattenPath
SetTextColor
PlgBlt
CreateFontIndirectA
ExtCreatePen
RoundRect
SetStretchBltMode
AnimatePalette
StrokePath
GetBitmapBits
PolyBezier
GetPath
GetBkColor
SetDIBits

comdlg32

GetFileTitleA

user32

MonitorFromWindow
CallNextHookEx
WinHelpW
SetWindowPos
GetSysColorBrush
SetScrollRange
DrawEdge
DestroyIcon
EmptyClipboard
DestroyCursor
UnhookWindowsHookEx
SetWindowsHookExW
IsClipboardFormatAvailable
DefWindowProcW
RegisterClassW
ToAscii
ClipCursor
SetClipboardData
ChildWindowFromPoint
GetSysColor

kernel32

GetSystemTime
FileTimeToSystemTime
GetFileAttributesA
CreateFiber
LocalAlloc
GetVolumeInformationW
SetCommConfig
VerLanguageNameW
GetFileType
FlushFileBuffers
CompareStringW
GetProfileStringW
SetEndOfFile
EnumResourceNamesW
SearchPathW
GetUserDefaultLangID
FlushFileBuffers
GetVersionExW
LockFile
FindResourceExA
IsDBCSLeadByte
GetFileTime
UnlockFile
FileTimeToLocalFileTime
GetSystemDirectoryW

ole32

OleRun
OleRegGetUserType
GetHGlobalFromILockBytes
CoGetClassObject
CoFreeUnusedLibraries
StringFromCLSID
RevokeDragDrop
CoCreateGuid
CoTaskMemFree
RegisterDragDrop
StgCreateDocfileOnILockBytes
GetHGlobalFromStream
CLSIDFromProgID
CoGetMalloc
ProgIDFromCLSID
CreateStreamOnHGlobal
CoCreateInstance
StgOpenStorageOnILockBytes
CLSIDFromString
OleDuplicateData
OleGetAutoConvert
ReleaseStgMedium
CoTaskMemAlloc
CreateILockBytesOnHGlobal

comctl32

ImageList_GetIconSize
ImageList_DrawEx
ImageList_Add
ImageList_Create
ImageList_Destroy

rpcrt4

RpcStringBindingComposeA
NdrClientCall
RpcBindingFromStringBindingA
RpcBindingSetAuthInfoA
RpcStringFreeA

Sections

.text
Size: 156KB - Virtual size: 156KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.lib
Size: 512B - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a7042e24563771cfb945f7e3c0b9084c

Headers

File Characteristics

Imports

shlwapi

gdi32

comdlg32

user32

kernel32

ole32

comctl32

rpcrt4

Sections

.text Size: 156KB - Virtual size: 156KB

.rdata Size: 3KB - Virtual size: 2KB

.data Size: 22KB - Virtual size: 22KB

.lib Size: 512B - Virtual size: 76KB

.text
Size: 156KB - Virtual size: 156KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 22KB - Virtual size: 22KB

.lib
Size: 512B - Virtual size: 76KB