b6382b15c49df9b14619b39191bb7560_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

b6382b15c49df9b14619b39191bb7560_JaffaCakes118
Size

143KB
MD5

b6382b15c49df9b14619b39191bb7560
SHA1

239cf1aafc653f08cdc1e5f4b43c99d14fbe0a6d
SHA256

7c0cdb3973c2c3796ccb182eef92b2397397791e639fe2ad9fde003738671509
SHA512

673136de91a712bc8bc12487499fdd973edc446c58c889d4b44c2b8cb87ca4728497975e348189dfad2b16d4f2035bf340a0999f7fcd547d3d92ed8eadf82aca
SSDEEP

3072:dMAZYjgra62Jk6ZnYieHdzm1ZaRXT+d12WiAoDdET:j0gratnYX9aZwXT+X2G

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b6382b15c49df9b14619b39191bb7560_JaffaCakes118

Files

b6382b15c49df9b14619b39191bb7560_JaffaCakes118
.exe windows:4 windows x86 arch:x86

cc61b96f47e8d37fdcefcb14bfc42fdf

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

SetFileAttributesA
VirtualProtect
FileTimeToLocalFileTime
SetEnvironmentVariableA
CreateProcessW
GetVersionExW
MulDiv
GetStartupInfoA
GetModuleHandleA

msvcrt

wcsncmp
_initterm
__set_app_type
__setusermatherr
_adjust_fdiv
_except_handler3
__getmainargs
exit
__p__commode
__p__fmode
log
_XcptFilter
strcmp
wcsncpy
fsetpos
_acmdln
_wcsicmp

user32

TranslateMessage
GetMenuItemID
CloseClipboard
InvalidateRect
LoadStringA
IsIconic
LoadCursorA
EndPaint
GetSystemMetrics
GetCursorPos

oleaut32

GetErrorInfo
VariantCopy
SafeArrayUnaccessData
SetErrorInfo
SafeArrayGetUBound
SysReAllocStringLen
VariantCopyInd
SafeArrayPutElement
VariantInit
SafeArrayCreate
SysStringByteLen

ole32

CoCreateGuid
IsAccelerator
CoRegisterClassObject
RegisterDragDrop
OleSetMenuDescriptor
StgOpenStorageOnILockBytes
OleRun
CoRevokeClassObject
CreateItemMoniker
DoDragDrop
CLSIDFromProgID

version

VerInstallFileA
VerInstallFileW
GetFileVersionInfoW
VerQueryValueW
VerQueryValueA

shell32

ExtractIconExW
SHGetSpecialFolderPathA
ExtractIconW
SHGetFolderPathA
DragQueryFileA
SHBrowseForFolder
SHGetSpecialFolderPathW
SHChangeNotify

gdi32

PlayMetaFileRecord
SetWinMetaFileBits
SetWindowOrgEx
MaskBlt
GetTextAlign
EndDoc
GetCurrentObject
StartDocW

comctl32

ImageList_GetBkColor
ImageList_Add
ImageList_DragEnter
ImageList_Destroy
ImageList_Read
ImageList_EndDrag
ImageList_BeginDrag
PropertySheetW

advapi32

IsValidSid
OpenServiceA
RegOpenKeyExW
AllocateAndInitializeSid
OpenServiceW

Sections

.text
Size: 63KB - Virtual size: 62KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 30KB - Virtual size: 54KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

qnjtkvs
Size: - Virtual size: 76KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

cc61b96f47e8d37fdcefcb14bfc42fdf

Headers

File Characteristics

Imports

kernel32

msvcrt

user32

oleaut32

ole32

version

shell32

gdi32

comctl32

advapi32

Sections

.text Size: 63KB - Virtual size: 62KB

.data Size: 49KB - Virtual size: 48KB

.rsrc Size: 30KB - Virtual size: 54KB

qnjtkvs Size: - Virtual size: 76KB

.text
Size: 63KB - Virtual size: 62KB

.data
Size: 49KB - Virtual size: 48KB

.rsrc
Size: 30KB - Virtual size: 54KB

qnjtkvs
Size: - Virtual size: 76KB