ba417c00dfc4cbfed824be82fb6fd48e_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

ba417c00dfc4cbfed824be82fb6fd48e_JaffaCakes118
Size

134KB
MD5

ba417c00dfc4cbfed824be82fb6fd48e
SHA1

99da6495ad65fc221b97e064e7cdcfc00c7d1b20
SHA256

25d53a7e81ec212b0721a32a5706dc7c846067d9b721ee4dc43271cfa4a503e1
SHA512

b140fc9181e9a6f67ffa8c782c37245d15ae5ffce83f664e5bc31a2dcb2bab65e218c8b3cef876d77a1483166851fa93b875b4f4edbd0305cc33f8c6aad512c6
SSDEEP

3072:ce6+U4+h72JSGNPNNxofuMzDKFhpca8LIK+hvTnZNgoblhmf:B+FyNNIuMzDuIqbnZre

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ba417c00dfc4cbfed824be82fb6fd48e_JaffaCakes118

Files

ba417c00dfc4cbfed824be82fb6fd48e_JaffaCakes118
.exe windows:5 windows x86 arch:x86

d6d2e654c0238c8e41fb6a407d03202f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

LCMapStringA
GetStartupInfoA
GlobalLock
GetModuleHandleA
SetFilePointer
VirtualAlloc
VirtualProtect

msvcrt

_initterm
_except_handler3
_iob
__set_app_type
_onexit
wcstombs
longjmp
atoi
sqrt
strcmp
__getmainargs
_XcptFilter
__setusermatherr
__p__fmode
exit
log
_adjust_fdiv
_acmdln
__p__commode

user32

GetMessagePos
RedrawWindow
SetCursor
GetMenuItemID
SetMenu
IsRectEmpty
WaitMessage
GetCursorPos
MapWindowPoints

oleaut32

GetActiveObject
SysFreeString
CreateErrorInfo
LoadTypeLib
SysAllocStringLen
SafeArrayRedim
SafeArrayGetUBound

comctl32

ImageList_SetOverlayImage
ImageList_GetImageInfo
InitCommonControlsEx
ImageList_LoadImageW
PropertySheetA
ImageList_Destroy
ImageList_Remove
ImageList_Draw
ImageList_GetIconSize
ImageList_ReplaceIcon

shell32

ExtractIconExA
CommandLineToArgvW
SHCreateDirectoryExA
SHAddToRecentDocs
SHAppBarMessage
Shell_NotifyIconW
ExtractIconW
SHFileOperationW
SHGetSettings

ole32

IIDFromString
OleFlushClipboard
RegisterDragDrop
CoRevokeClassObject
StgCreateDocfileOnILockBytes
ProgIDFromCLSID
CoInitialize
OleRun
OleSetMenuDescriptor
CoTaskMemRealloc

gdi32

CreatePolygonRgn
SetWindowOrgEx
PolylineTo
Pie
PlayMetaFile
GetSystemPaletteEntries
CreateMetaFileW
CreateEnhMetaFileA
DeleteObject
GdiFlush
EndDoc
OffsetWindowOrgEx

advapi32

LookupPrivilegeValueW
RegOpenKeyExA
IsValidSid
RevertToSelf

version

VerQueryValueA
VerFindFileW
GetFileVersionInfoW
GetFileVersionInfoA

Sections

.text
Size: 64KB - Virtual size: 63KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdvwpzp
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

d6d2e654c0238c8e41fb6a407d03202f

Headers

File Characteristics

Imports

kernel32

msvcrt

user32

oleaut32

comctl32

shell32

ole32

gdi32

advapi32

version

Sections

.text Size: 64KB - Virtual size: 63KB

.data Size: 48KB - Virtual size: 48KB

.rsrc Size: 20KB - Virtual size: 48KB

rdvwpzp Size: - Virtual size: 4KB

.text
Size: 64KB - Virtual size: 63KB

.data
Size: 48KB - Virtual size: 48KB

.rsrc
Size: 20KB - Virtual size: 48KB

rdvwpzp
Size: - Virtual size: 4KB