aa66b82be1e2943b750f5f4dd4731ae3_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

aa66b82be1e2943b750f5f4dd4731ae3_JaffaCakes118
Size

138KB
MD5

aa66b82be1e2943b750f5f4dd4731ae3
SHA1

42e997434f08af70f356f6ebbec418aaa18bcffb
SHA256

f309e7f39ffda5d27f0f97449a77b6b0fcf4dc8eade2a740fd0bb6c5f6745548
SHA512

b333ec8db1f5e334474c8bca8221b56d19f93f37544895b3a735f700e6b04df3d88e716f0847a044064a34eac597dfee8a8781083406259ec9be08caa8d5462a
SSDEEP

3072:Og/AAfv49eaEV69RZ8rlxLbjue0QgmQUvHh3gRZuqX/A:lBH49ehVTFXe+gR8UY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aa66b82be1e2943b750f5f4dd4731ae3_JaffaCakes118

Files

aa66b82be1e2943b750f5f4dd4731ae3_JaffaCakes118
.exe windows:5 windows x86 arch:x86

356b956ecf9ec240be6172386f51ae58

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

FileTimeToLocalFileTime
SetEnvironmentVariableA
CompareFileTime
GetDriveTypeA
GetStartupInfoA
CreateProcessW
GetStdHandle
VirtualProtect
InterlockedIncrement
SetFileAttributesW
GetTimeZoneInformation
GetModuleHandleA
GlobalAlloc
QueryPerformanceCounter

user32

GetScrollInfo
LoadIconA
GetSubMenu
LoadCursorA
IsDialogMessageA
InvalidateRect
SetWindowsHookExA
OffsetRect
GetDCEx

msvcrt

log10
iswspace
__set_app_type
__p__commode
exit
__getmainargs
_adjust_fdiv
_except_handler3
_initterm
ctime
wcslen
_acmdln
__p__fmode
__setusermatherr
log
clearerr
strtoul
_XcptFilter

advapi32

InitializeSecurityDescriptor
RegCreateKeyExA
RegEnumKeyA
RegQueryValueExW
CryptReleaseContext
LookupPrivilegeValueW
CryptHashData

ole32

CoRevokeClassObject
StgOpenStorage
IsEqualGUID
RevokeDragDrop
RegisterDragDrop
CoReleaseMarshalData
ReleaseStgMedium
CoTaskMemFree
StringFromGUID2
CoUninitialize

comctl32

ImageList_Read
CreatePropertySheetPageW
ImageList_SetDragCursorImage
CreateStatusWindowA
ImageList_Replace
ImageList_Remove
ImageList_AddMasked
ImageList_BeginDrag

shell32

SHAppBarMessage
ShellExecuteExW
ExtractAssociatedIconW
FindExecutableW
ShellExecuteA
SHGetFolderLocation

version

GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueA
VerFindFileW
VerLanguageNameA

Sections

.text
Size: 92KB - Virtual size: 92KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

356b956ecf9ec240be6172386f51ae58

Headers

File Characteristics

Imports

kernel32

user32

msvcrt

advapi32

ole32

comctl32

shell32

version

Sections

.text Size: 92KB - Virtual size: 92KB

.data Size: 16KB - Virtual size: 15KB

.rsrc Size: 28KB - Virtual size: 28KB

.text
Size: 92KB - Virtual size: 92KB

.data
Size: 16KB - Virtual size: 15KB

.rsrc
Size: 28KB - Virtual size: 28KB