ddb02996b3072edb585280186e52b11e_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

ddb02996b3072edb585280186e52b11e_JaffaCakes118
Size

130KB
MD5

ddb02996b3072edb585280186e52b11e
SHA1

044c8792f45c44b35409c68926b3701460e5f85e
SHA256

c4f9b287c3685af999146095dd936739233444046753c615c7c3e4c87454ae1f
SHA512

50aa17da1872399ab2d9c91590823860212fc82c4ff89db91bd0d669475f574d1de846bf707ed9ffa6ce9d88f9cc33389f90aeff32f8f737236e37b403982427
SSDEEP

3072:3bTw9XbqHy3+pLaH/5lxZsPO+AarQvj+x1BbuQhMJnAI3:4xSO9ZsPO+XtdbhhMJA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ddb02996b3072edb585280186e52b11e_JaffaCakes118

Files

ddb02996b3072edb585280186e52b11e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6edb037324fcfc29a43594ba440035bb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

msvcrt

_onexit
__p__commode
_initterm
rename
_adjust_fdiv
__setusermatherr
_wcsupr
_wfopen
_XcptFilter
__p__fmode
wcsncmp
strcpy
exit
_acmdln
_except_handler3
_wcsnicmp
_chmod
__getmainargs
__set_app_type
log10
_mbsrchr
_controlfp
_cexit

kernel32

WaitForMultipleObjects
GetSystemDirectoryW
GetStartupInfoA
GetSystemDefaultLCID
IsBadWritePtr
GetModuleHandleA
VirtualProtect
lstrcmpiW
InterlockedCompareExchange
lstrcmpA
GetCPInfo

gdi32

GetDCOrgEx
LineTo
EnumFontFamiliesW
ExtCreateRegion
EndPath
CreateRectRgn
GetRegionData
SelectObject
CloseMetaFile

shell32

SHFileOperationA
SHGetFolderPathW
ShellExecuteA
DragQueryFile
SHAddToRecentDocs
Shell_NotifyIconW

user32

EnableMenuItem
GetIconInfo
DispatchMessageA
GetMenuStringA
RegisterClipboardFormatA
BeginPaint
GetKeyboardType
UpdateWindow
GetActiveWindow
EnableWindow
RegisterWindowMessageA
SetPropA

advapi32

GetTokenInformation
RegQueryValueA
GetLengthSid
RegFlushKey
CheckTokenMembership

comctl32

ImageList_DragEnter
CreateStatusWindowA
ImageList_BeginDrag
ImageList_Add
ImageList_Destroy
ImageList_Remove
PropertySheetW
ImageList_Read
ImageList_SetImageCount
ImageList_Draw
ImageList_GetImageCount

version

GetFileVersionInfoW
VerInstallFileA
VerFindFileW
GetFileVersionInfoSizeA
VerLanguageNameA
VerInstallFileW
VerQueryValueA

oleaut32

SafeArrayPutElement
SafeArrayGetUBound
SysReAllocStringLen
VariantInit
GetErrorInfo

ole32

CoGetClassObject
OleRun
CoInitialize
CreateItemMoniker
CoDisconnectObject
CoReleaseMarshalData
CoRegisterMessageFilter
CoCreateGuid
StringFromIID

Sections

.text
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 17KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 94KB - Virtual size: 94KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6edb037324fcfc29a43594ba440035bb

Headers

File Characteristics

Imports

msvcrt

kernel32

gdi32

shell32

user32

advapi32

comctl32

version

oleaut32

ole32

Sections

.text Size: 17KB - Virtual size: 17KB

.data Size: 17KB - Virtual size: 40KB

.rsrc Size: 94KB - Virtual size: 94KB

.text
Size: 17KB - Virtual size: 17KB

.data
Size: 17KB - Virtual size: 40KB

.rsrc
Size: 94KB - Virtual size: 94KB