c83e235e11afaccc575c5ae945d78095_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

c83e235e11afaccc575c5ae945d78095_JaffaCakes118
Size

147KB
MD5

c83e235e11afaccc575c5ae945d78095
SHA1

1c28d50495aee67424c41ab6638cb988aa6e011f
SHA256

8bfb1ab9f20ba53586c240ed9914d937ae529bf7df3e7f54aa7a4860c3cf4b83
SHA512

e3c9f9894e8bf66f616c7c735c93dfec2ce279ccecb2fa1dc852f8d3e5b687700b374aab12250225c1e15a1ad718e683cdbab678f6fd45bd7d0e7b5dda9bf949
SSDEEP

3072:WYLGuVmKQ+FebiolHd3edet9QJo489j1feed81SPJPBF:9j14l93qet9Qq48xddRxP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c83e235e11afaccc575c5ae945d78095_JaffaCakes118

Files

c83e235e11afaccc575c5ae945d78095_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1d4503f05681fa31b4c6c2528ca4837c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

VirtualAlloc
lstrcmpA
GlobalUnlock
GetModuleHandleA
WritePrivateProfileStringA
GetTempPathA
GetStartupInfoA
VirtualProtect
GlobalFree
GetModuleFileNameA
lstrcmpiA
LocalFree
GetUserDefaultLCID
FormatMessageA
DeviceIoControl
GetModuleHandleW
GetTimeZoneInformation

user32

GetClassInfoA
SetWindowsHookExA
GetDC
GetActiveWindow
CharLowerA
GetSysColor
SetCapture
GetFocus
TrackPopupMenu
InsertMenuItemA
FillRect
SendMessageA
InsertMenuA
KillTimer

msvcrt

log10
_ismbblead
__p__commode
swscanf
_XcptFilter
__set_app_type
_except_handler3
_acmdln
wcscmp
exit
__setusermatherr
_c_exit
__getmainargs
_initterm
fgetpos
_filelengthi64
_kbhit
_CIsqrt
__p__fmode
__pioinfo
_adjust_fdiv

advapi32

RegOpenKeyW
RegCreateKeyA
SetSecurityDescriptorGroup
CryptReleaseContext
QueryServiceStatus
GetUserNameA
RegEnumKeyExW

ole32

ProgIDFromCLSID
CoGetInterfaceAndReleaseStream
OleDraw
CoLoadLibrary
RevokeDragDrop
CoCreateInstance
ReleaseStgMedium
OleFlushClipboard
CoInitializeSecurity
CLSIDFromProgID

comctl32

ImageList_DrawEx
InitCommonControlsEx
ImageList_Replace
ImageList_Write
CreatePropertySheetPageA
ImageList_SetBkColor
ImageList_LoadImageW
ImageList_EndDrag

shell32

ExtractIconExW
Shell_NotifyIconW
SHBrowseForFolderW
SHFileOperationA
SHGetSpecialFolderPathA
SHAddToRecentDocs

oleaut32

VariantCopy
VariantInit
CreateErrorInfo
SafeArrayPutElement

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 135KB - Virtual size: 135KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

1d4503f05681fa31b4c6c2528ca4837c

Headers

File Characteristics

Imports

kernel32

user32

msvcrt

advapi32

ole32

comctl32

shell32

oleaut32

Sections

.text Size: 4KB - Virtual size: 4KB

.rdata Size: 135KB - Virtual size: 135KB

.data Size: 6KB - Virtual size: 5KB

.text
Size: 4KB - Virtual size: 4KB

.rdata
Size: 135KB - Virtual size: 135KB

.data
Size: 6KB - Virtual size: 5KB