0cfdb49f006c0a0b149b3141657f430d_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

0cfdb49f006c0a0b149b3141657f430d_JaffaCakes118
Size

132KB
MD5

0cfdb49f006c0a0b149b3141657f430d
SHA1

ec8772025f7cc01d9cb6a0e8082e6a367227afdd
SHA256

ef683cc621afb729f8691ea99173118fd618e604d12ee8d9a1a4f863ad282f73
SHA512

de52547ec170312e634e04c6ba39408710f5c6156936978106ad67680eeda34e287201263baa7193e3aaea458692723ddba5955e5435dc1765282be073519646
SSDEEP

3072:k9y8anqqm7oO0S4u7s1z2BLxcFkOh1CKIQy1:k9Jhqm7oOV4uHRO9I31

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0cfdb49f006c0a0b149b3141657f430d_JaffaCakes118

Files

0cfdb49f006c0a0b149b3141657f430d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6e993b626db7fa161d4075277b70bdce

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegQueryInfoKeyA
RegQueryValueExW
RegReplaceKeyW
RegOpenKeyA
RegQueryInfoKeyW
RegEnumKeyA
RegCreateKeyExA
RegDeleteValueA
RegEnumValueW
RegFlushKey
RegEnumKeyExW
RegLoadKeyW
RegGetKeySecurity
RegOpenKeyExA
RegDeleteKeyA
RegEnumValueA
RegDeleteValueW
RegOpenKeyExW
RegLoadKeyA
RegCreateKeyW
RegCreateKeyExW
RegEnumKeyW
RegDeleteKeyW
RegOpenKeyW
RegReplaceKeyA
RegQueryValueExA
RegQueryValueW
RegEnumKeyExA
RegQueryValueA
RegOpenKeyW
RegQueryValueExW
RegCreateKeyExW
RegEnumKeyExW
RegCreateKeyExA
RegQueryValueExA
RegOpenKeyA
RegDeleteKeyW
RegEnumValueW
RegDeleteValueA
RegOpenKeyExA
RegDeleteValueW
RegEnumKeyW
RegQueryValueA
RegEnumKeyExA
RegEnumValueA
RegReplaceKeyW
RegReplaceKeyA
RegGetKeySecurity
RegQueryValueW
RegOpenKeyExW
RegLoadKeyA
RegQueryInfoKeyA
RegEnumKeyA
RegDeleteKeyA
RegCreateKeyW
RegQueryInfoKeyW
RegLoadKeyW
RegFlushKey

user32

GetWindowTextLengthA
DialogBoxParamA
InsertMenuA
LoadCursorA
GetCursor
CopyImage
AppendMenuW
GetDC
IsMenu
CopyIcon
IsWindow
DrawTextW
LoadMenuA
CalcMenuBar
DrawIcon
EndDialog
BlockInput
CloseWindow
AlignRects
DrawIconEx
GetDlgItem
GetFocus
CreateIcon
AppendMenuA
DialogBoxParamW
DrawTextA
CopyRect
GetWindowTextA
GetMenu

kernel32

CloseHandle
lstrcmpA
CloseHandle
GetDateFormatA
CloseHandle
GetFileSize
CloseHandle
GetModuleFileNameA
CloseHandle
GlobalFree
CloseHandle
lstrlenA
CloseHandle
FreeLibrary
CloseHandle
GetLocalTime
CloseHandle
lstrcpynA
CloseHandle

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdada
Size: 104KB - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edaaa
Size: 5KB - Virtual size: 153KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bds
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ

.rsdc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6e993b626db7fa161d4075277b70bdce

Headers

File Characteristics

Imports

advapi32

user32

kernel32

Sections

.text Size: 11KB - Virtual size: 10KB

.rdada Size: 104KB - Virtual size: 104KB

.edaaa Size: 5KB - Virtual size: 153KB

.bds Size: - Virtual size: 1KB

.rsdc Size: 7KB - Virtual size: 6KB

.text
Size: 11KB - Virtual size: 10KB

.rdada
Size: 104KB - Virtual size: 104KB

.edaaa
Size: 5KB - Virtual size: 153KB

.bds
Size: - Virtual size: 1KB

.rsdc
Size: 7KB - Virtual size: 6KB