0fa915203b298413d4d52f8b96ebe8dc_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

0fa915203b298413d4d52f8b96ebe8dc_JaffaCakes118
Size

220KB
MD5

0fa915203b298413d4d52f8b96ebe8dc
SHA1

8905f285ac731fe5c5ca580e270820d74e5359c1
SHA256

e92cb5c41ba0ed49392c042029ddacaaef8cfaa28d73fd656cedcccb302ba3a6
SHA512

900477c6621b35bbdfdbad9fb7fb293776181315f47903c36e9ed71182af7c1082bca22fea1a7eb70fadd00b54cb2207e891dc8e10c720db184efb87ea069b28
SSDEEP

6144:Q1rvicp9M+pj0Q/yVjkyZXQK4a9Nwkqs8:erN9vpwQ/yVjkylQK4aQkN8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0fa915203b298413d4d52f8b96ebe8dc_JaffaCakes118

Files

0fa915203b298413d4d52f8b96ebe8dc_JaffaCakes118
.exe windows:4 windows x86 arch:x86

14452bd55f541679b23e4bc873f0a9f3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

SHGetValueA
SHEnumValueA
PathGetCharTypeA
PathIsDirectoryA
PathIsContentTypeA
SHDeleteKeyA
SHStrDupA

msvcrt

rand
strlen
wcsncmp
atol
mbstowcs
memcmp
log10
abs
mbstowcs

kernel32

GetModuleHandleA
GetCommandLineW
GetLastError
GetCommandLineA
LoadLibraryA
LoadLibraryExA
VirtualAlloc
IsBadHugeReadPtr
ExitProcess
VirtualAllocEx
GetOEMCP
lstrlenA
IsBadReadPtr
GetProcAddress

shell32

SHGetDiskFreeSpaceA
DragQueryFileA
SHFileOperationA
SHGetSpecialFolderLocation

user32

GetScrollPos
GetDlgItem
SetFocus
GetKeyState
GetKeyboardType
GetKeyboardLayoutList
GetKeyboardState
GetPropA
GetMenuStringA
GetMessagePos
GetWindow
GetParent
GetKeyboardLayout
GetKeyboardLayoutNameA
GetSysColor
GetMenuState
GetMenuItemInfoA
GetMenuItemCount
GetScrollInfo
GetLastActivePopup
GetWindowDC
GetScrollPos
GetSubMenu
GetWindowLongA
GetIconInfo
GetKeyNameTextA
GetTopWindow
GetSysColorBrush
GetScrollRange
GetMenu
GetSystemMenu
GetWindowLongW
GetMenuItemID

oleaut32

SafeArrayPtrOfIndex
OleLoadPicture
RegisterTypeLib
VariantCopyInd
GetErrorInfo
SysStringLen
SafeArrayCreate
SysReAllocStringLen
SysAllocStringLen
VariantChangeType
SysFreeString
SafeArrayGetElement
SysStringLen
OleLoadPicture
SysAllocStringLen
VariantCopyInd
SafeArrayPtrOfIndex
GetErrorInfo

comdlg32

ChooseColorA
GetFileTitleA

ole32

CoReleaseMarshalData
CLSIDFromProgID
OleRun
CoCreateGuid
StringFromIID
CoGetObjectContext
CLSIDFromString
WriteClassStm

advapi32

GetLengthSid
RegQueryValueExA
RegQueryValueA
GetUserNameA

gdi32

SetBkColor
CreatePenIndirect
CopyEnhMetaFileA

version

VerQueryValueA
GetFileVersionInfoSizeA
VerFindFileA

comctl32

ImageList_Draw
ImageList_Write
ImageList_DrawEx

Sections

.text
Size: 172KB - Virtual size: 169KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 972B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.hdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

14452bd55f541679b23e4bc873f0a9f3

Headers

File Characteristics

Imports

shlwapi

msvcrt

kernel32

shell32

user32

oleaut32

comdlg32

ole32

advapi32

gdi32

version

comctl32

Sections

.text Size: 172KB - Virtual size: 169KB

.rdata Size: 4KB - Virtual size: 64KB

.data Size: 4KB - Virtual size: 972B

DATA Size: 8KB - Virtual size: 4KB

.adata Size: 12KB - Virtual size: 8KB

.hdata Size: 8KB - Virtual size: 4KB

.rsrc Size: 8KB - Virtual size: 7KB

.text
Size: 172KB - Virtual size: 169KB

.rdata
Size: 4KB - Virtual size: 64KB

.data
Size: 4KB - Virtual size: 972B

DATA
Size: 8KB - Virtual size: 4KB

.adata
Size: 12KB - Virtual size: 8KB

.hdata
Size: 8KB - Virtual size: 4KB

.rsrc
Size: 8KB - Virtual size: 7KB