12864a04b5c43126d192c16f10544834_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

12864a04b5c43126d192c16f10544834_JaffaCakes118
Size

127KB
MD5

12864a04b5c43126d192c16f10544834
SHA1

85cbb3039b28111739dd5b6fb1c0620e285d9d29
SHA256

cd4c9c5be57142e22733d64696a0e049e336a4432468749dc13fc0dcd6b886a2
SHA512

5cd791804a8eeebc9853fd13d2e4c1d3fef87217030b7a5974eb260ce46cc33cf5e5c440ae457dfe49bccfa50ad8709f14cbef4a0199204005d6b3b0a6b2b0e7
SSDEEP

3072:07lCOAX4ipVQ5WpDqIqOvVB82vcXwE9Vabt004xTcsLa/6B8yA9y:07lCVTMWZqM8KQVa5NiZa/6yyH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Adobe_Photoshop_CS3_v10_0_keygen_by_SSG.exe

Files

12864a04b5c43126d192c16f10544834_JaffaCakes118
.zip
Adobe_Photoshop_CS3_v10_0_keygen_by_SSG.exe
.exe windows:5 windows x86 arch:x86

f4d5b6d0eebbe9a1badc7c468904cb10

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ntdll

_vsnwprintf
wcslen

shlwapi

StrStrIA
PathIsContentTypeA
SHCopyKeyW
StrCmpNIW
SHRegGetUSValueA
ord157

shell32

ord73
ord192

kernel32

lstrcmpiW
WriteProfileStringW
lstrcpyA
PulseEvent
SetupComm
HeapAlloc
SetMailslotInfo
SetHandleInformation
GetProfileStringW
LoadLibraryA
WriteFileGather
SetFileShortNameW
ReadFileScatter
GetExitCodeProcess
lstrcpynW
ReleaseSemaphore
GetHandleInformation
MoveFileW
FindClose
MoveFileA
EnumResourceNamesA
CloseHandle
GetCurrentProcessId
ResetWriteWatch
GetProcAddress
GetWindowsDirectoryA
PeekNamedPipe
DosDateTimeToFileTime
FormatMessageW
_lcreat
CompareFileTime
FileTimeToDosDateTime
BackupSeek

user32

PostMessageW
EnumPropsExA
TranslateAcceleratorW
EnumPropsW
EndPaint
IsWindowVisible
CreateDialogParamW
DestroyCursor
GetDCEx
GetKeyboardState
CharLowerW
CharPrevA
DlgDirSelectExA
CopyImage
GetMenuDefaultItem
GetMenuCheckMarkDimensions
BeginPaint
SetPropW
GetScrollBarInfo
TranslateMessage
LoadAcceleratorsW
GetWindowTextA
ScrollDC
GetAltTabInfoA
PeekMessageW
ScrollWindow
GetWindowRgn
SetWindowTextA
DispatchMessageW
GetParent
GetDC
GetComboBoxInfo
GetPropW

gdi32

ModifyWorldTransform
SetBoundsRect
OffsetClipRgn
GetWorldTransform
SetTextColor
LineTo
GetTextMetricsW
SetWindowExtEx
DescribePixelFormat
GetCharABCWidthsA
SetDIBitsToDevice
FillRgn
GetBitmapBits
GetTextCharset
CreateBitmap

advapi32

InitializeSid
GetSidLengthRequired
PrivilegedServiceAuditAlarmA
GetSidSubAuthority
EqualSid

Exports

Exports

__GetModuleFileName@12
__ValidateRgn@12

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.code
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 228B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

TEMP
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pedata
Size: 1024B - Virtual size: 592B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 126KB - Virtual size: 126KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 806B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
FILE_ID.DIZ

Sharing

General

Malware Config

Signatures

Files

f4d5b6d0eebbe9a1badc7c468904cb10

Headers

File Characteristics

Imports

ntdll

shlwapi

shell32

kernel32

user32

gdi32

advapi32

Exports

Exports

Sections

.text Size: 2KB - Virtual size: 1KB

.code Size: 11KB - Virtual size: 11KB

.data Size: 512B - Virtual size: 228B

TEMP Size: 3KB - Virtual size: 2KB

.pedata Size: 1024B - Virtual size: 592B

.rsrc Size: 126KB - Virtual size: 126KB

.reloc Size: 1024B - Virtual size: 806B

.text
Size: 2KB - Virtual size: 1KB

.code
Size: 11KB - Virtual size: 11KB

.data
Size: 512B - Virtual size: 228B

TEMP
Size: 3KB - Virtual size: 2KB

.pedata
Size: 1024B - Virtual size: 592B

.rsrc
Size: 126KB - Virtual size: 126KB

.reloc
Size: 1024B - Virtual size: 806B