0cba1a6917c2c6a03893a66c7730ba50_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

0cba1a6917c2c6a03893a66c7730ba50_JaffaCakes118
Size

224KB
MD5

0cba1a6917c2c6a03893a66c7730ba50
SHA1

abd0ddb70c5a641be9a8b178b233c7cef0325eb9
SHA256

e6b963d1a385546edf51659521e8546f37fef653b613483b0a3a91785630ea9e
SHA512

8180532b96715b9d030be29fc3fd2f8ee8879ad626857e93dcb9981db4ea547a61f5a72a426a3044826b917138045e5c36f7b76e211944ddbef7fbf488505f29
SSDEEP

3072:0rdrH4NlV+hAKBiZ7SjYs0euhYSkabyK0RBMm4IhFqRHWP5bVVxveRo4iF5Zf/fu:IHG0h3HKwabyK0RBMm4ScWP1/x2RInZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0cba1a6917c2c6a03893a66c7730ba50_JaffaCakes118

Files

0cba1a6917c2c6a03893a66c7730ba50_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4aa19818f48f0e7c065ded5c04caa8d3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

oleaut32

SysStringLen
SafeArrayGetUBound
SafeArrayGetElement
SafeArrayCreate

shlwapi

PathIsDirectoryA
PathIsContentTypeA
SHQueryInfoKeyA
SHEnumValueA
SHDeleteKeyA
SHGetValueA
PathFileExistsA
SHQueryValueExA
SHDeleteValueA
SHStrDupA

advapi32

RegCreateKeyA
RegEnumKeyA
RegLoadKeyA

comctl32

ImageList_Write
ImageList_Destroy
ImageList_DragShowNolock
ImageList_Read
ImageList_Add
ImageList_GetBkColor
ImageList_DrawEx
ImageList_Create
ImageList_Draw
ImageList_Remove

version

VerFindFileA
GetFileVersionInfoA
GetFileVersionInfoSizeA

kernel32

lstrlenA
GetModuleHandleA
GetOEMCP
GetCurrentThreadId
HeapDestroy
GetACP
InitializeCriticalSection
GetCommandLineW
GetCommandLineA
GetFileType
VirtualAlloc
ExitProcess
GetModuleHandleW
GetProcAddress
ExitThread
LoadLibraryExA
lstrlenW
LoadLibraryA

Sections

CODE
Size: 76KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 7KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.hdata
Size: 126KB - Virtual size: 125KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.cdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4aa19818f48f0e7c065ded5c04caa8d3

Headers

File Characteristics

Imports

oleaut32

shlwapi

advapi32

comctl32

version

kernel32

Sections

CODE Size: 76KB - Virtual size: 76KB

.rdata Size: 1KB - Virtual size: 1KB

.data Size: 7KB - Virtual size: 35KB

.hdata Size: 126KB - Virtual size: 125KB

.cdata Size: 1KB - Virtual size: 1KB

.rsrc Size: 10KB - Virtual size: 9KB

CODE
Size: 76KB - Virtual size: 76KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 7KB - Virtual size: 35KB

.hdata
Size: 126KB - Virtual size: 125KB

.cdata
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 10KB - Virtual size: 9KB