d0bdc30ba016681c28a8e49cfe9585f5_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

d0bdc30ba016681c28a8e49cfe9585f5_JaffaCakes118
Size

58KB
MD5

d0bdc30ba016681c28a8e49cfe9585f5
SHA1

9b545ca22785507f800bb177e5c79fb9a281e045
SHA256

54e5b115f11a36f7ae13815f50ee8a4cf00c80980c6e330caf420b5e7d2182be
SHA512

811484dba361488fde03b95f70ec8a4a25021858cb01643abf59422e7d6223aa13618fcf9ce07ec83d6ce0a59d746dbc364134b2bb73d8baa1c70c25ce2abfa8
SSDEEP

1536:jAQwU55kGEitfn7k5TFyQIyCJrRMlDKvrkhldH1+qk:T5kGfVQUJrR4KYhldV+qk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d0bdc30ba016681c28a8e49cfe9585f5_JaffaCakes118

Files

d0bdc30ba016681c28a8e49cfe9585f5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4cd1c8e97820da61f7f7ec7a919b952c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

ImageList_GetIconSize
ImageList_LoadImageW
ImageList_DragShowNolock
ImageList_GetImageRect
ImageList_DragMove
ImageList_DragEnter
InitCommonControls
ImageList_LoadImage
ImageList_Draw
ImageList_Replace
ImageList_GetDragImage
ImageList_Read
ImageList_BeginDrag
ImageList_GetImageCount
ImageList_Create
ImageList_AddMasked
ImageList_Copy
ImageList_AddIcon
ImageList_GetImageInfo
ImageList_ReplaceIcon
ImageList_GetImageRect
InitCommonControls
ImageList_Draw
ImageList_Replace
ImageList_GetIconSize
ImageList_GetDragImage
ImageList_DragEnter
ImageList_DrawIndirect
ImageList_DragShowNolock
ImageList_DrawEx
ImageList_LoadImageW
ImageList_Copy
ImageList_DragLeave
ImageList_EndDrag
ImageList_Destroy
ImageList_GetImageInfo
ImageList_LoadImage
ImageList_AddIcon
ImageList_LoadImageA
ImageList_BeginDrag

kernel32

DeleteAtom
GetCPInfo
CopyFileW
ReadConsoleA
DeleteFileA
ExitThread
SetLastError
OpenFile
CopyFileExW
GlobalFree
CreateProcessA
CopyFileExA
ReadFile
GetConsoleMode
GetCommandLineA
CreateThread
GetFileSize
WriteFile
GetLastError
FindFirstFileA
GetComputerNameA
GetCPInfo
CopyFileExW
CreateDirectoryA
ReadConsoleA
FindFirstFileA
GetFileTime
GetConsoleMode
ReadFile
SetLastError
GetComputerNameA
CopyFileA
FindAtomA
OpenFile
CopyFileExA
DeleteFileA
CreateThread
OpenFileMappingA
GetCommandLineA
DeleteFileW
DeleteAtom
ExitThread
Sleep
SetLastError
CreateDirectoryA
CopyFileExW
ReadConsoleA
DeleteFileA
GetFileSize
OpenFile
Sleep
GetComputerNameA
CreateProcessA
DeleteFileW
CopyFileA
FindFirstFileA
GetCPInfo
WriteFile
OpenFileMappingA
GlobalFree
CopyFileExA

advapi32

RegOpenKeyExA
RegDeleteKeyW
RegDeleteValueA
RegEnumKeyExA
RegCreateKeyExA
RegQueryValueExW
RegReplaceKeyA
RegQueryValueA
RegOpenKeyExW
RegCreateKeyW
RegCreateKeyExW
RegEnumValueW
RegReplaceKeyW
RegQueryInfoKeyW
RegDeleteValueW
RegQueryInfoKeyA
RegEnumKeyW
RegDeleteKeyA
RegEnumKeyW
RegReplaceKeyW
RegQueryValueExW
RegDeleteKeyW
RegDeleteValueA
RegQueryValueW
RegDeleteValueW
RegCreateKeyExW
RegLoadKeyA
RegEnumValueW
RegQueryInfoKeyW
RegQueryInfoKeyA
RegOpenKeyExW
RegOpenKeyA
RegFlushKey

user32

InsertMenuA
IsWindow
GetMenu
LoadMenuA
AlignRects
GetDC
CopyImage
CopyRect
GetFocus
BlockInput
DrawTextA
AppendMenuA
LoadCursorA
IsMenu
DialogBoxParamW
DrawIcon
DialogBoxParamA
GetCursor
DrawIconEx
EndDialog
CreateIcon
GetWindowTextLengthA
AppendMenuW

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 49KB - Virtual size: 105KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4cd1c8e97820da61f7f7ec7a919b952c

Headers

File Characteristics

Imports

comctl32

kernel32

advapi32

user32

Sections

.text Size: 3KB - Virtual size: 3KB

.rdata Size: 4KB - Virtual size: 4KB

.data Size: 49KB - Virtual size: 105KB

.text
Size: 3KB - Virtual size: 3KB

.rdata
Size: 4KB - Virtual size: 4KB

.data
Size: 49KB - Virtual size: 105KB