b0786fd8bbcbff30692e34294f37bc3d_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

b0786fd8bbcbff30692e34294f37bc3d_JaffaCakes118
Size

125KB
MD5

b0786fd8bbcbff30692e34294f37bc3d
SHA1

5e3154b68d0895ad20356a4cc41da1dbd3d49180
SHA256

5d5cd1f450179c7f7ed098dcdef21864a25228e57fc1bb4d2abf32130f79efe7
SHA512

d48c3b5442b06d8e2181b9f6e9d9158dc7d0a24d2271ce38b9096165f787d7047092295bbe62d85c299a27498f37dc668104b42238b56ba4bd17d50e73fef43d
SSDEEP

3072:M3G5QitNyzTYbTl0wauXPlM4udMKX+Z3FZnoDwMLMEaA3X:HQE8z0Swn/e4uJXGy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b0786fd8bbcbff30692e34294f37bc3d_JaffaCakes118

Files

b0786fd8bbcbff30692e34294f37bc3d_JaffaCakes118
.exe windows:5 windows x86 arch:x86

dd6538e2e095c7f57d9072d164deb0eb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetCommandLineW
GetStartupInfoA
GetModuleHandleA
LCMapStringA
SystemTimeToFileTime
OpenProcess
GetStringTypeExA
SetFilePointer
GlobalUnlock
VirtualProtect
MulDiv
GetCurrentDirectoryA

user32

IntersectRect
SetForegroundWindow
WindowFromPoint
LoadCursorA
OemToCharA
DestroyWindow
IsZoomed
GetWindowRect
GetSystemMetrics

msvcrt

log10
_XcptFilter
__set_app_type
__p__fmode
_initterm
__getmainargs
_adjust_fdiv
_errno
fputc
fread
__p__commode
__setusermatherr
exit
_acmdln
free
_except_handler3

ole32

CoRegisterMessageFilter
StringFromIID
GetRunningObjectTable
OleDraw
CoRegisterClassObject
CreateStreamOnHGlobal
ProgIDFromCLSID
OleFlushClipboard

oleaut32

LoadTypeLib
VariantInit
VariantClear
SysReAllocStringLen
SysFreeString
CreateErrorInfo
SafeArrayUnaccessData
VariantCopyInd
SafeArrayPtrOfIndex

comctl32

ImageList_AddMasked
ImageList_LoadImageA
ImageList_DragLeave
ImageList_ReplaceIcon
ImageList_LoadImageW
ImageList_Draw
CreatePropertySheetPageA
ImageList_SetImageCount
ImageList_GetImageInfo

version

GetFileVersionInfoSizeA
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerInstallFileW

advapi32

LookupPrivilegeValueA
RegQueryInfoKeyA
OpenSCManagerW
FreeSid
RegEnumKeyExW
InitiateSystemShutdownA
RegDeleteKeyW
CryptGenRandom

shell32

Shell_NotifyIconW
SHGetSpecialFolderLocation
SHFileOperationA
SHGetSettings
FindExecutableW
SHGetPathFromIDListA

Sections

.text
Size: 75KB - Virtual size: 74KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

dd6538e2e095c7f57d9072d164deb0eb

Headers

File Characteristics

Imports

kernel32

user32

msvcrt

ole32

oleaut32

comctl32

version

advapi32

shell32

Sections

.text Size: 75KB - Virtual size: 74KB

.data Size: 15KB - Virtual size: 15KB

.rsrc Size: 33KB - Virtual size: 33KB

.text
Size: 75KB - Virtual size: 74KB

.data
Size: 15KB - Virtual size: 15KB

.rsrc
Size: 33KB - Virtual size: 33KB