a34d55fad35ca8fc97efc8c419822407_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

a34d55fad35ca8fc97efc8c419822407_JaffaCakes118
Size

83KB
MD5

a34d55fad35ca8fc97efc8c419822407
SHA1

570e53ec04bda943eb0c24484506b31544241e70
SHA256

00f73390a4e46c56ea7694f807fef56e1b7e2aeefc070adcf5d683000625a483
SHA512

cc8b2830bce5deeec32a9f1024676a30be7485b0e1d17da8bbaeed7ffcf459872b1275296f914ade492689f5c7383171d6dd707a836c5668f26507be2c9945ee
SSDEEP

1536:zRSJIlb/u3F1ErDMpoGLlWrx1XStibvD/r9TNwMbWAVnb2rxmk+VjgC:dSGlbCF1Ero2GIF1i8X/JRVKAhcx+r

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a34d55fad35ca8fc97efc8c419822407_JaffaCakes118

Files

a34d55fad35ca8fc97efc8c419822407_JaffaCakes118
.exe windows:5 windows x86 arch:x86

46a81a84c6bb2c0a25fa3341c8ffe112

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

user32

GetScrollPos
FrameRect
SetWindowPos
GetMessageA
EqualRect
GetSysColorBrush
UnhookWindowsHookEx
PostQuitMessage
EnableMenuItem
SetWindowTextA
GetSubMenu
GetSysColor
EnumWindows

kernel32

ExitProcess
RtlUnwind
VirtualAllocEx
QueryPerformanceCounter
InterlockedExchange
GetTempPathA
GetTimeZoneInformation
GetStartupInfoA
GetSystemTime
GetFileAttributesA
GetCurrentProcessId
SetUnhandledExceptionFilter
GetThreadLocale
FileTimeToSystemTime

gdi32

FillRgn
SetViewportExtEx
CopyEnhMetaFileA
CreateCompatibleBitmap
GetMapMode
ExcludeClipRect
CreateICW
SelectClipPath
DPtoLP

ole32

StringFromGUID2
StgOpenStorage
CoInitialize
CoTaskMemRealloc
OleRun
CoInitializeSecurity
DoDragDrop
CoRevokeClassObject
CoCreateInstance

advapi32

AdjustTokenPrivileges
FreeSid
GetUserNameA
RegQueryValueExW
QueryServiceStatus
CryptHashData
CheckTokenMembership
GetSecurityDescriptorDacl
RegCreateKeyExW
RegCreateKeyA

msvcrt

fprintf
puts
_flsbuf
_lock
_CIpow
strncpy
__initenv
__setusermatherr
fflush
strlen
_mbscmp
_fdopen
iswspace
__getmainargs
_strdup
raise
strcspn
signal

comctl32

ImageList_DragEnter
ImageList_SetIconSize
ImageList_LoadImageA
ImageList_Destroy
ImageList_GetIconSize
ImageList_LoadImageW
ImageList_Write
ImageList_GetBkColor
InitCommonControls
ImageList_ReplaceIcon
ImageList_GetIcon
ImageList_DrawEx
CreatePropertySheetPageA

shell32

ShellExecuteEx
ExtractIconW
SHGetPathFromIDList
SHBrowseForFolderA
DragAcceptFiles
DragQueryFileW
ShellExecuteW
CommandLineToArgvW
DoEnvironmentSubstW
DragQueryFileA
ExtractIconExW

oleaut32

SafeArrayPutElement
SafeArrayCreate
SafeArrayPtrOfIndex
VariantCopy
SafeArrayGetUBound
SafeArrayRedim
SysReAllocStringLen
SafeArrayUnaccessData

Sections

.text
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

46a81a84c6bb2c0a25fa3341c8ffe112

Headers

File Characteristics

Imports

user32

kernel32

gdi32

ole32

advapi32

msvcrt

comctl32

shell32

oleaut32

Sections

.text Size: 35KB - Virtual size: 34KB

.data Size: 41KB - Virtual size: 41KB

.rsrc Size: 6KB - Virtual size: 84KB

.text
Size: 35KB - Virtual size: 34KB

.data
Size: 41KB - Virtual size: 41KB

.rsrc
Size: 6KB - Virtual size: 84KB