0742aaf6dc5d831bf4ffbd0e632655db_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

0742aaf6dc5d831bf4ffbd0e632655db_JaffaCakes118
Size

351KB
MD5

0742aaf6dc5d831bf4ffbd0e632655db
SHA1

91f38bb2cfca87074c22cfea3ecd9b9ae72307a2
SHA256

5a23410e1783d02666397bad4073b9500ce37cd99c739a2c3a50b4688cd9ea44
SHA512

e8f76244e0c2013653e57ec07c041564fe482b77a28134b1e597947f17712c2704594759fb50a65c0cc9b29f64e195d90af7c922dd55a1cd651b4c9789aeb28c
SSDEEP

6144:L9zALuc8zvFzkzmiBRvKYJvf0aEHVVQPvNuutom54:LxALJ8zRkqkKYJX0l1SPvUug

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0742aaf6dc5d831bf4ffbd0e632655db_JaffaCakes118

Files

0742aaf6dc5d831bf4ffbd0e632655db_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ebe55202b4935cb936fa91264d3cfa26

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

PathMakeSystemFolderW
PathUnquoteSpacesW
SHRegGetBoolUSValueA
StrToIntExA
SHGetValueA
PathQuoteSpacesW
SHRegGetUSValueA
PathFindExtensionW
SHRegOpenUSKeyW
PathIsUNCServerW
PathAddBackslashW
StrCSpnW
PathCanonicalizeW
PathSearchAndQualifyW
PathSetDlgItemPathW
PathCompactPathExW
SHDeleteKeyA
PathRemoveBlanksA
StrFormatByteSizeW
SHEnumKeyExW
SHRegWriteUSValueA
PathGetArgsA
PathIsContentTypeW
PathIsPrefixW
PathSkipRootA
PathStripPathW
PathRelativePathToA
PathIsFileSpecA
PathAddExtensionW
PathCanonicalizeA
SHDeleteValueW
PathIsUNCServerShareW
StrTrimW
PathCommonPrefixW
PathFindOnPathA
SHRegEnumUSKeyW
PathIsURLA
SHDeleteEmptyKeyA
PathRemoveFileSpecW
SHRegGetUSValueW
StrCpyW
PathRemoveFileSpecA
PathStripPathA
PathIsSystemFolderW
PathIsPrefixA
SHRegEnumUSKeyA
StrCSpnA
SHRegGetBoolUSValueW
SHRegCreateUSKeyW
PathSkipRootW
PathIsRootW
PathMatchSpecW
StrCmpW
PathIsRootA
PathIsFileSpecW
PathQuoteSpacesA
SHOpenRegStreamA
ChrCmpIW
PathGetArgsW
SHGetValueW
PathFindOnPathW
PathCompactPathW
SHCreateShellPalette
StrFormatByteSizeA
PathBuildRootW
StrNCatW
PathStripToRootW
PathFindFileNameA

msvcrt

_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit

user32

IsIconic
UnpackDDElParam
GetKeyboardLayoutNameA
GetMessagePos
VkKeyScanA
SetSystemCursor
CreateWindowExA
DdeDisconnectList
DefFrameProcA
DispatchMessageA
DdeEnableCallback
GrayStringA
SetWindowsHookA
GetSysColorBrush
FreeDDElParam
SetDlgItemTextW
SetCapture
SetProcessWindowStation
SetDlgItemTextA
GetPropW
GetDesktopWindow
EnumDisplaySettingsA
AppendMenuA
TranslateAcceleratorW
SetPropA
ChangeDisplaySettingsExW
EnableWindow
UnregisterClassA
OpenIcon
CheckMenuRadioItem
GetWindowRect
HideCaret
UnregisterClassW
GetWindowLongA
DrawTextExW
IsMenu
DestroyCursor
GetKeyboardType
GetClipboardData
SetKeyboardState
CreateDialogIndirectParamA
ShowScrollBar
GetIconInfo
DefWindowProcW
LoadCursorFromFileA
EnumDesktopWindows
DdeGetLastError
LoadCursorW
ScreenToClient
GetLastActivePopup
SetDoubleClickTime
GetPriorityClipboardFormat
SetMenuDefaultItem
DlgDirSelectComboBoxExW
FrameRect
IsWindowUnicode
RemoveMenu
CallMsgFilterA
ChildWindowFromPointEx
CheckRadioButton
DispatchMessageW
GetCursor
GetMenuItemInfoW
GetDlgItemTextA
IsRectEmpty
TranslateAcceleratorA
GetForegroundWindow
LoadAcceleratorsA
InsertMenuItemW
EnableScrollBar
SetForegroundWindow
GetMenuContextHelpId
LoadCursorA
GetSystemMetrics
CreateDialogParamA
AttachThreadInput
TranslateMDISysAccel
SetWindowsHookExA
ShowOwnedPopups
ChangeMenuA
UpdateWindow
WINNLSEnableIME
GetCursorPos
MapVirtualKeyExA
ToAscii
GetWindowModuleFileNameW
GetWindowLongW
GetUpdateRect
DdeQueryStringA
DdeInitializeA

kernel32

GetStartupInfoA
ExitProcess
EnumResourceNamesW
FlushFileBuffers
GlobalWire
GetStringTypeExA
GetDateFormatW
GlobalMemoryStatus
AllocConsole
GetModuleHandleA
Toolhelp32ReadProcessMemory
GetStartupInfoA
ExitProcess
EnumResourceNamesW
FlushFileBuffers
GlobalWire
GetStringTypeExA
GetDateFormatW
GlobalMemoryStatus
AllocConsole
GetModuleHandleA
Toolhelp32ReadProcessMemory

comdlg32

FindTextA

advapi32

RegDeleteValueA

Sections

.text
Size: 116KB - Virtual size: 112KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 3.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ebe55202b4935cb936fa91264d3cfa26

Headers

File Characteristics

Imports

shlwapi

msvcrt

user32

kernel32

comdlg32

advapi32

Sections

.text Size: 116KB - Virtual size: 112KB

.rdata Size: 8KB - Virtual size: 5KB

.data Size: 8KB - Virtual size: 3.6MB

.rsrc Size: 24KB - Virtual size: 22KB

.reloc Size: 16KB - Virtual size: 12KB

.text
Size: 116KB - Virtual size: 112KB

.rdata
Size: 8KB - Virtual size: 5KB

.data
Size: 8KB - Virtual size: 3.6MB

.rsrc
Size: 24KB - Virtual size: 22KB

.reloc
Size: 16KB - Virtual size: 12KB