d3acbfea7c09d78f43857bc1c91cf3f6_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

d3acbfea7c09d78f43857bc1c91cf3f6_JaffaCakes118
Size

99KB
MD5

d3acbfea7c09d78f43857bc1c91cf3f6
SHA1

83c55b7438daa8984f9a51892f65ad14145a211a
SHA256

eb7c733bbf61c5684f5011873563ac0a2076daf66796551d9ec6edbf27a0e5cf
SHA512

c7e4aa88ed717bfa755d56ad16971943e0d616feab9c7672a90298b32a150c0cee7668649c4122748da45889ca09a46e2f9221c0bda071d3b44e25dad93d6d37
SSDEEP

3072:j3eTHIaICRZMVZTm/querPvZOVSFCXZ/00:juTImgT6qnrSECXZ7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d3acbfea7c09d78f43857bc1c91cf3f6_JaffaCakes118

Files

d3acbfea7c09d78f43857bc1c91cf3f6_JaffaCakes118
.exe windows:5 windows x86 arch:x86

2a1102e4e1ffef83d3fbcae98d36961a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
GetVersionExA
SetThreadLocale
SetEnvironmentVariableA
GetStartupInfoA
VirtualProtect
GetCurrentDirectoryA
ExitProcess
DeviceIoControl
GetEnvironmentStringsW

user32

SetClipboardData
SetTimer
GetDC
GetScrollRange
GetCapture
SetScrollRange
MapWindowPoints
GetSysColor
LoadCursorA

msvcrt

isxdigit
_strnicmp
fflush
__set_app_type
__p__fmode
_adjust_fdiv
atexit
_acmdln
__p__commode
_itow
__setusermatherr
__mb_cur_max
_except_handler3
sqrt
_XcptFilter
_initterm
_controlfp
qsort
exit
__getmainargs
rewind
fclose

ole32

OleDraw
CoSetProxyBlanket
StgCreateDocfileOnILockBytes
OleUninitialize
CoTaskMemAlloc
CoInitializeSecurity
ReleaseStgMedium

comctl32

ImageList_GetImageCount
ImageList_Replace
ImageList_Read
ImageList_SetBkColor
ImageList_Add
ImageList_GetIconSize
ImageList_EndDrag
ImageList_DragLeave
ImageList_AddMasked

advapi32

RegCreateKeyExW
RegEnumKeyExA
OpenServiceW
DeregisterEventSource
FreeSid
QueryServiceStatus
RegQueryInfoKeyA
RegEnumValueW
RegEnumKeyA
EqualSid
GetSecurityDescriptorDacl
LookupPrivilegeValueA
OpenProcessToken
RegOpenKeyExA
CryptGenRandom

shell32

SHGetDesktopFolder
SHGetFolderLocation
SHGetFolderPathA
ExtractIconExW
Shell_NotifyIconA
ShellExecuteExA
SHAppBarMessage
SHFileOperationW
SHAddToRecentDocs
SHCreateDirectoryExW
SHCreateDirectoryExA

oleaut32

SysFreeString
SysStringLen
VariantInit
VariantCopy
SafeArrayPtrOfIndex
SafeArrayUnaccessData
SafeArrayRedim

Sections

.text
Size: 69KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2a1102e4e1ffef83d3fbcae98d36961a

Headers

File Characteristics

Imports

kernel32

user32

msvcrt

ole32

comctl32

advapi32

shell32

oleaut32

Sections

.text Size: 69KB - Virtual size: 68KB

.data Size: 4KB - Virtual size: 3KB

.rsrc Size: 25KB - Virtual size: 25KB

.text
Size: 69KB - Virtual size: 68KB

.data
Size: 4KB - Virtual size: 3KB

.rsrc
Size: 25KB - Virtual size: 25KB