b4ce6fba7e3eef47d7140eb82f863888_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

b4ce6fba7e3eef47d7140eb82f863888_JaffaCakes118
Size

212KB
MD5

b4ce6fba7e3eef47d7140eb82f863888
SHA1

cc16a8f21a9a00cff6800fb9aebc7d33d05664d3
SHA256

68d519bbbe49cfa2e2ce1accb6ac2c7dbd2b0f92e6d985a6f92dbe4cb0a78cdc
SHA512

6d3326cdbe8ebde5529949bc742b0fe4feb65c22f7358dffefbb306c4714ee2987e2340f65b8123908cff7564d83f1cd2e178cee68da8cf2d1f42010e0bbf3de
SSDEEP

3072:jPVzl2hGhRPmC0pHoqYcrxWLqtLxZEzP0qmUCcsXJ6dNtMRbxIyUys5ZK3bGVFSf:d4ZmyleIbFbXJ1Rb5Ud+rGavn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b4ce6fba7e3eef47d7140eb82f863888_JaffaCakes118

Files

b4ce6fba7e3eef47d7140eb82f863888_JaffaCakes118
.exe windows:4 windows x86 arch:x86

92eca93c45dcf8d0ad859306d063a088

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

DragAcceptFiles
SHAppBarMessage
SHBrowseForFolderA
SHBrowseForFolderW
SHGetFolderPathA
SHGetMalloc
SHGetSpecialFolderLocation

advapi32

InitiateSystemShutdownA
OpenServiceW
OpenThreadToken
QueryServiceStatus
RegCloseKey
RegEnumKeyW
RegEnumValueA
SetSecurityDescriptorOwner

kernel32

CompareStringA
ExitProcess
FindResourceA
FindResourceW
FreeEnvironmentStringsA
GetExitCodeThread
GetFileSize
GetSystemTime
GetTempPathW
GetThreadLocale
GetVersionExA
GetWindowsDirectoryA
IsDebuggerPresent
RaiseException
SetEndOfFile
SizeofResource
Sleep
WideCharToMultiByte
WriteFile
lstrcpynA

comctl32

CreatePropertySheetPageW
CreateToolbarEx
ImageList_GetBkColor
ImageList_GetImageCount
ImageList_SetBkColor
ImageList_SetImageCount
InitCommonControls
InitializeFlatSB

ole32

CLSIDFromProgID
CLSIDFromString
CoCreateGuid
CoCreateInstance
CoDisconnectObject
CoGetInterfaceAndReleaseStream
CoGetMalloc
CoLoadLibrary
CoUninitialize
CreateBindCtx
CreateItemMoniker
CreateStreamOnHGlobal
OleFlushClipboard

gdi32

CreateCompatibleBitmap
CreateDIBitmap
DeleteDC
DeleteEnhMetaFile
EndDoc
GetNearestColor
GetObjectType
GetRegionData
GetStretchBltMode
GetTextExtentPoint32W
GetTextMetricsW
IntersectClipRect
InvertRgn
MoveToEx
Pie
RoundRect
SaveDC
SelectClipPath
SetAbortProc
SetDIBits
SetRectRgn
SetViewportOrgEx
StartDocA
TranslateCharsetInfo

user32

CreatePopupMenu
DefWindowProcA
DrawIconEx
EnumThreadWindows
FillRect
FrameRect
GetMenuItemCount
GetMenuItemID
GetMessagePos
GetPropA
GetScrollInfo
GetWindowThreadProcessId
IsIconic
IsRectEmpty
MessageBoxA
OemToCharA
OffsetRect
PostQuitMessage
RemoveMenu
RemovePropA
ScreenToClient
SystemParametersInfoA
UpdateWindow
wsprintfA

Sections

.text
Size: 88KB - Virtual size: 87KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 98KB - Virtual size: 98KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 22KB - Virtual size: 140KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

92eca93c45dcf8d0ad859306d063a088

Headers

File Characteristics

Imports

shell32

advapi32

kernel32

comctl32

ole32

gdi32

user32

Sections

.text Size: 88KB - Virtual size: 87KB

.rdata Size: 3KB - Virtual size: 2KB

.data Size: 98KB - Virtual size: 98KB

.rsrc Size: 22KB - Virtual size: 140KB

.text
Size: 88KB - Virtual size: 87KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 98KB - Virtual size: 98KB

.rsrc
Size: 22KB - Virtual size: 140KB