fdaa20630d8bdba651131651c028bcd3_JaffaCakes118

General

Target

fdaa20630d8bdba651131651c028bcd3_JaffaCakes118
Size

101KB
MD5

fdaa20630d8bdba651131651c028bcd3
SHA1

ad99eb001dcb737a0ab9fa8def977580c55295bd
SHA256

94b32861b92b7db456f794b0edbd6fb90bff5c366e56e1f7bc2a78601e92a5e6
SHA512

8b3520770499f797150a384d8e8d839c98bc07a05127e519cbd6eff762bfc8cd85d843fcd944d2223130b53ba7ad5f922e43ae989591661add7a49cfc4b2d0db
SSDEEP

3072:SX03UJgEsAORWxHQ+MpiQO1rSG5h/C1eAkz:3UqEsAsBiQO1b5h/CQH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fdaa20630d8bdba651131651c028bcd3_JaffaCakes118

Files

fdaa20630d8bdba651131651c028bcd3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0f5b659cf244f18a2ff9db1b0f7b8b52

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

VirtualAlloc
SetErrorMode
GetShortPathNameA
CompareFileTime
GetStartupInfoA
OutputDebugStringA
GetModuleHandleA
GetModuleFileNameA
GetSystemDirectoryW
GetCurrentProcess
VirtualProtect

user32

EqualRect
SetClassLongA
KillTimer
GetSysColor
GetSysColorBrush
CreateMenu

msvcrt

_adjust_fdiv
_initterm
__p__fmode
wcsncpy
_XcptFilter
_getch
__p__commode
sqrt
strtol
_acmdln
_CIpow
strtok
exit
_utime
_except_handler3
_close
__getmainargs
__set_app_type
sprintf
_beginthreadex
__setusermatherr
fprintf

advapi32

LookupPrivilegeValueA
GetSecurityDescriptorDacl
CryptHashData
RegEnumKeyExW
RegOpenKeyExW
RegEnumValueW
GetTokenInformation
RegEnumKeyW
OpenSCManagerW

comctl32

InitializeFlatSB
DestroyPropertySheetPage
ImageList_SetImageCount
ImageList_Replace
ImageList_SetIconSize
ImageList_EndDrag
ImageList_SetBkColor
ImageList_AddMasked
ImageList_Draw
InitCommonControls

oleaut32

SafeArrayGetElement
GetErrorInfo
VariantCopy
SafeArrayGetUBound
SysAllocStringLen
SafeArrayPutElement
SysFreeString
SysStringLen

ole32

CoRegisterClassObject
CreateBindCtx
OleSetClipboard
CoRevokeClassObject

shell32

ShellExecuteA
DragQueryFileW
SHGetSpecialFolderPathW
ExtractIconA
SHBindToParent

Sections

.text
Size: 70KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0f5b659cf244f18a2ff9db1b0f7b8b52

Headers

File Characteristics

Imports

kernel32

user32

msvcrt

advapi32

comctl32

oleaut32

ole32

shell32

Sections

.text Size: 70KB - Virtual size: 70KB

.data Size: 4KB - Virtual size: 3KB

.rsrc Size: 25KB - Virtual size: 25KB

.text
Size: 70KB - Virtual size: 70KB

.data
Size: 4KB - Virtual size: 3KB

.rsrc
Size: 25KB - Virtual size: 25KB