b315ee90fbee3147ec6940076eeb663e_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

b315ee90fbee3147ec6940076eeb663e_JaffaCakes118
Size

233KB
MD5

b315ee90fbee3147ec6940076eeb663e
SHA1

769dea2a363b78efc334cf516a275263bca0b9f9
SHA256

16cccc62e63a59f3514d0271db30057aba9525bc1fa709fa16747458c07e4045
SHA512

d8cd49cf31c6f90cb25df21a6bf9eed06a8d6e0b259316de1f3d7fc1e9529eec68086fa4a580228b1bf805983c8d4e4e892951b460cd7009a908074449212f6e
SSDEEP

6144:eoP7ph/0GzA8DGZJK9Uae1paOEdpPOXMt6ONoJQ:eoP7phzA8DC/UbhOJQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b315ee90fbee3147ec6940076eeb663e_JaffaCakes118

Files

b315ee90fbee3147ec6940076eeb663e_JaffaCakes118
.dll windows:4 windows x86 arch:x86

36247f41286884c6798bf13c6bd8e1ba

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

ole32

CoGetContextToken
StgCreateDocfileOnILockBytes

kernel32

MoveFileA
GetDateFormatA
VirtualAlloc
IsBadReadPtr
LocalAlloc
ResetEvent
SetEndOfFile
GetLastError
ReadFile
LoadLibraryA
GetCommandLineW
GetModuleHandleA
ExitThread
ExitProcess
GetVersionExA
GetProcAddress
GetACP
GlobalAlloc

msvcrt

wcsncmp
pow
srand
_acmdln
cos
rand
wcscspn

user32

GetKeyNameTextA
GetKeyState
GetIconInfo

shell32

SHGetFolderPathA
SHGetFileInfoA
SHFileOperationA

gdi32

BitBlt
GetClipBox

comdlg32

FindTextA

shlwapi

SHEnumValueA
SHDeleteKeyA
PathGetCharTypeA
PathIsDirectoryA
SHQueryValueExA
SHGetValueA
SHQueryInfoKeyA
PathIsContentTypeA

comctl32

ImageList_DragShowNolock
ImageList_GetBkColor
ImageList_DrawEx
ImageList_Create
ImageList_Write

advapi32

RegDeleteKeyA
GetUserNameA
RegEnumKeyA
RegEnumValueA

oleaut32

SafeArrayPtrOfIndex
GetErrorInfo
VariantChangeType
SafeArrayGetUBound
SafeArrayUnaccessData
SafeArrayGetElement
RegisterTypeLib
SafeArrayCreate

version

GetFileVersionInfoSizeA
VerFindFileA

Sections

CODE
Size: 57KB - Virtual size: 57KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 734B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: 1024B - Virtual size: 748B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gdata
Size: 158KB - Virtual size: 226KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 996B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

36247f41286884c6798bf13c6bd8e1ba

Headers

File Characteristics

Imports

ole32

kernel32

msvcrt

user32

shell32

gdi32

comdlg32

shlwapi

comctl32

advapi32

oleaut32

version

Sections

CODE Size: 57KB - Virtual size: 57KB

.rdata Size: 1024B - Virtual size: 734B

.data Size: 8KB - Virtual size: 8KB

.adata Size: 1024B - Virtual size: 748B

.gdata Size: 158KB - Virtual size: 226KB

.bdata Size: 3KB - Virtual size: 2KB

.rsrc Size: 1024B - Virtual size: 996B

.reloc Size: 1KB - Virtual size: 1KB

CODE
Size: 57KB - Virtual size: 57KB

.rdata
Size: 1024B - Virtual size: 734B

.data
Size: 8KB - Virtual size: 8KB

.adata
Size: 1024B - Virtual size: 748B

.gdata
Size: 158KB - Virtual size: 226KB

.bdata
Size: 3KB - Virtual size: 2KB

.rsrc
Size: 1024B - Virtual size: 996B

.reloc
Size: 1KB - Virtual size: 1KB