a785474a7aa3c42ffdc2d4726258aa2b_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

a785474a7aa3c42ffdc2d4726258aa2b_JaffaCakes118
Size

91KB
MD5

a785474a7aa3c42ffdc2d4726258aa2b
SHA1

3762b37192e76af7d631f051931eb25cd9b554b0
SHA256

66cec0be46fc24f207fafea4925a5c5771cac9a2cefedebb26f16e9eee8579d4
SHA512

9bcc41ef664bbcb60f781c8dd25bc3925569faf9771861da169fa2580be2101916ee06a44b13268d21a1cb2e5c4e150313b446e9d2f0dd4dff3dbcb5a824b9d6
SSDEEP

1536:KdLEO4TeqI4D/w/S8yYVDcBuuYSQMxZXB448oIO7V2TXbE59sVg0xdy7sd9:gfsewY/S8y4Qh5L58AKXbnfdywf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a785474a7aa3c42ffdc2d4726258aa2b_JaffaCakes118

Files

a785474a7aa3c42ffdc2d4726258aa2b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d9cd2998f0c38d3fea6a798ada797c37

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CalcMenuBar
CreateIcon
CopyRect
EndDialog
DrawTextW
IsWindow
GetCursor
GetWindowTextLengthA
GetDlgItem
CloseWindow
GetWindowTextA
LoadCursorA
DrawIcon
AppendMenuW
AlignRects
BlockInput
DrawTextA
InsertMenuA
GetFocus
CloseWindow
DialogBoxParamA
BlockInput
CreateIcon
GetDlgItem
GetFocus
LoadMenuA
IsWindow
CopyImage
AlignRects
GetMenu
GetDC
GetWindowTextA
DialogBoxParamW
EndDialog
DrawIcon

comctl32

ImageList_GetImageRect
ImageList_AddIcon
InitCommonControls
ImageList_GetIconSize
ImageList_GetDragImage
ImageList_LoadImageA
ImageList_DragEnter
ImageList_Create
ImageList_DragShowNolock
ImageList_LoadImage
ImageList_Draw
ImageList_Copy
ImageList_Merge
ImageList_Destroy
ImageList_DrawIndirect
ImageList_Remove
ImageList_GetImageCount

kernel32

GetStdHandle
GlobalFree
GetModuleHandleA
DeleteFileA
CloseHandle
GetFileSize
GetStringTypeA
lstrcatA
HeapAlloc
GetCommandLineA
GetDateFormatA
Sleep
lstrcmpA
SetLastError
GetFileAttributesA
lstrcpyA
WideCharToMultiByte
lstrcpynA
GetLastError

advapi32

RegReplaceKeyA
RegQueryValueExW
RegQueryValueExA
RegOpenKeyA
RegEnumKeyExA
RegDeleteKeyA
RegQueryValueW
RegGetKeySecurity
RegReplaceKeyW
RegOpenKeyW
RegOpenKeyExA
RegLoadKeyA
RegCreateKeyW
RegQueryInfoKeyW
RegDeleteKeyW
RegQueryValueA
RegQueryInfoKeyA
RegCreateKeyExA
RegEnumKeyA
RegEnumKeyExW

Sections

.nTiUvD
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.oMoA
Size: 65KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.GPTKV
Size: 6KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MSIF
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ

.gZzOLe
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d9cd2998f0c38d3fea6a798ada797c37

Headers

File Characteristics

Imports

user32

comctl32

kernel32

advapi32

Sections

.nTiUvD Size: 14KB - Virtual size: 13KB

.oMoA Size: 65KB - Virtual size: 65KB

.GPTKV Size: 6KB - Virtual size: 61KB

.MSIF Size: - Virtual size: 3KB

.gZzOLe Size: 1KB - Virtual size: 1KB

.nTiUvD
Size: 14KB - Virtual size: 13KB

.oMoA
Size: 65KB - Virtual size: 65KB

.GPTKV
Size: 6KB - Virtual size: 61KB

.MSIF
Size: - Virtual size: 3KB

.gZzOLe
Size: 1KB - Virtual size: 1KB