0ad516c66e4aa4bd9e9358e97a3c460c_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

0ad516c66e4aa4bd9e9358e97a3c460c_JaffaCakes118
Size

81KB
MD5

0ad516c66e4aa4bd9e9358e97a3c460c
SHA1

a250f0322c3bc6fb30b5e5af331462d48c00bb3c
SHA256

ee3bb27b53b71e5ea4d2b452c0d59e57b15b98733d8242995e38a1c185a6ac54
SHA512

69f778cdb6d787eccd6b1bd7fa4c677a940c1ba15868babda7d7a9b9e6a4064d268a01b53b158391db542a8602140b51960894b68df716eec2e8dcf181ea6dc2
SSDEEP

1536:FooOQWK7HGn3kaHjkN4kJwwjsVoZBQCVglT+PqmiGe+:zmgN4kJwSsVmMT+Pq7G7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0ad516c66e4aa4bd9e9358e97a3c460c_JaffaCakes118

Files

0ad516c66e4aa4bd9e9358e97a3c460c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e147bc4bdcb095209ae03117db804a10

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

AppendMenuW
GetWindowTextLengthA
CopyIcon
InsertMenuA
LoadCursorA
CloseWindow
LoadMenuA
AppendMenuA
DrawTextA
CopyRect
DrawIconEx
BlockInput
GetFocus
GetDlgItem
IsMenu
GetDC
EndDialog

kernel32

GetFileAttributesA
DeleteFileA
GetDateFormatA
Sleep
GetLastError
FreeLibrary
lstrcmpA
HeapFree
GetModuleFileNameA
lstrcpyA
GetLocalTime
lstrlenA
GetFileSize
GetCPInfo
lstrcatA
WideCharToMultiByte
GetCommandLineA

comctl32

ImageList_DragLeave
ImageList_Read
ImageList_Destroy
ImageList_DrawIndirect
ImageList_Create
ImageList_GetDragImage
ImageList_DragEnter
ImageList_GetIconSize
ImageList_EndDrag
ImageList_Draw
ImageList_BeginDrag
ImageList_ReplaceIcon
ImageList_LoadImage
ImageList_DrawEx
InitCommonControls
ImageList_GetImageCount
ImageList_GetImageInfo
ImageList_DragMove
ImageList_AddIcon

advapi32

RegEnumKeyW
RegCreateKeyExW
RegOpenKeyExA
RegCreateKeyExA
RegQueryInfoKeyW
RegQueryValueExA
RegEnumValueA
RegEnumKeyA
RegReplaceKeyA
RegLoadKeyW
RegEnumKeyExA
RegLoadKeyA
RegQueryValueExW
RegGetKeySecurity
RegOpenKeyA
RegReplaceKeyW

Sections

.DPrg
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.izCS
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.UDEvzy
Size: 512B - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vSzWH
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ

.xrNm
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e147bc4bdcb095209ae03117db804a10

Headers

File Characteristics

Imports

user32

kernel32

comctl32

advapi32

Sections

.DPrg Size: 8KB - Virtual size: 7KB

.izCS Size: 28KB - Virtual size: 27KB

.UDEvzy Size: 512B - Virtual size: 14KB

.vSzWH Size: - Virtual size: 1KB

.xrNm Size: 2KB - Virtual size: 2KB

.rsrc Size: 1024B - Virtual size: 4KB

.DPrg
Size: 8KB - Virtual size: 7KB

.izCS
Size: 28KB - Virtual size: 27KB

.UDEvzy
Size: 512B - Virtual size: 14KB

.vSzWH
Size: - Virtual size: 1KB

.xrNm
Size: 2KB - Virtual size: 2KB

.rsrc
Size: 1024B - Virtual size: 4KB