08440ee0c5e53449d5e9ece80154a435_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

08440ee0c5e53449d5e9ece80154a435_JaffaCakes118
Size

86KB
MD5

08440ee0c5e53449d5e9ece80154a435
SHA1

083bdc04db65b4be91c5a130d3fefb9b4b28c245
SHA256

8660f7773e297d36a78fbdeee5c46d5b8a969cd2e06589cfb4c617c7c9a8d476
SHA512

90e9c17e68ad4ab5acafafcc4126da0b2925dc062dab9dd352db7cbb176e4a0bdc527caf051fa2d74c1aafed34652a5f32647eeaedf84d440352e00ca05334ac
SSDEEP

1536:M6NgSSCZsZGHV8DLqgUbkZq6Fex9qdAKE3D/YKqECfRZ0:M6eSFm8aZt86ox9qp0ub0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
08440ee0c5e53449d5e9ece80154a435_JaffaCakes118

Files

08440ee0c5e53449d5e9ece80154a435_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ac3f9588ca382a7d5b2a832e0f581ef8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

abort
__setusermatherr
_exit
__p__commode
strncpy
_except_handler3
_adjust_fdiv
__set_app_type
strlen
_controlfp
__getmainargs
__p__fmode
_XcptFilter
memmove
_iob
_onexit
__p___initenv
_initterm
calloc
free
fopen

kernel32

SetCurrentDirectoryA
GetLastError
GetModuleFileNameA
GetProcAddress
CreateProcessW
GetOEMCP
Sleep
GetSystemTimeAsFileTime
GetCommandLineW
VirtualProtectEx
FreeEnvironmentStringsA
GetProcessHeap
SetThreadLocale
GetWindowsDirectoryA
GetModuleHandleW
SetStdHandle
UnhandledExceptionFilter

gdi32

CreateHalftonePalette
CreateSolidBrush
CreateFontIndirectA
Pie
GetRegionData
Rectangle
StretchDIBits
CreateICA
ExtSelectClipRgn
CloseEnhMetaFile
SelectClipPath
PlayMetaFile
GetNearestColor

user32

GetSystemMetrics
IsWindow
UnhookWindowsHookEx
SetTimer
BeginPaint
CreateWindowExA
SetWindowsHookExA
IsIconic
SetCursor
GetClassNameA
SetActiveWindow
GetWindowLongA
MapWindowPoints

advapi32

GetTokenInformation
InitializeSecurityDescriptor
RegEnumValueA
GetSecurityDescriptorDacl
RegEnumKeyExW
CloseServiceHandle
RegSetValueExA
RegOpenKeyExW
OpenSCManagerA
CryptDestroyHash
RegCloseKey
SetSecurityDescriptorGroup
RegCreateKeyExW
OpenServiceA

ole32

PropVariantClear
IIDFromString
OleRun
StgOpenStorage
CoGetMalloc
StringFromGUID2
CoRevokeClassObject
ProgIDFromCLSID
CoCreateGuid
OleSetMenuDescriptor
RegisterDragDrop
StgCreateDocfileOnILockBytes
CoInitialize
OleUninitialize

comctl32

CreateStatusWindowA
ImageList_LoadImageA
ImageList_SetImageCount
ImageList_AddMasked
PropertySheetW
ImageList_GetBkColor
ImageList_GetIcon
CreatePropertySheetPageA
DestroyPropertySheetPage
CreateToolbarEx
ImageList_Destroy
ImageList_LoadImageW

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ac3f9588ca382a7d5b2a832e0f581ef8

Headers

File Characteristics

Imports

msvcrt

kernel32

gdi32

user32

advapi32

ole32

comctl32

Sections

.text Size: 5KB - Virtual size: 5KB

.data Size: 8KB - Virtual size: 61KB

.rsrc Size: 7KB - Virtual size: 7KB

.text
Size: 5KB - Virtual size: 5KB

.data
Size: 8KB - Virtual size: 61KB

.rsrc
Size: 7KB - Virtual size: 7KB