12f5632a1e2bbc1fd4a38ef790bf632f_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

12f5632a1e2bbc1fd4a38ef790bf632f_JaffaCakes118
Size

114KB
MD5

12f5632a1e2bbc1fd4a38ef790bf632f
SHA1

0a56ec4c7c20f6261c56e714c563835a108182a4
SHA256

f1b341ff57088263c509aca7aad642dfbe0e48fcd5e6c6a34681aa9e2052ca0c
SHA512

3e5378c2f06ec3f2f83f498aa0ca64707c637353cb12ec61529282764816043ab8bc93d29d80b5c5467c02a4251433accffbc6ddc974d298c9745200c2cefd02
SSDEEP

1536:uhVtmvTBa8iGI6JktSMizVzFlCHK+hZzoyBk86G4YYbMJpDedP9bPBIR/tze60Ph:CtmvTRpxGqoVBnSAJpCh9bCzoocP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
12f5632a1e2bbc1fd4a38ef790bf632f_JaffaCakes118

Files

12f5632a1e2bbc1fd4a38ef790bf632f_JaffaCakes118
.exe windows:5 windows x86 arch:x86

80027cfe506457d59af352529077b89e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_initterm
__getmainargs
__p___initenv
__p__fmode
_strnicmp
_onexit
_except_handler3
calloc
_XcptFilter
fputs
__setusermatherr
_exit
realloc
sqrt
fprintf
_adjust_fdiv
free
_controlfp
memmove
__set_app_type
__p__commode
_vsnprintf
strncpy

comdlg32

GetOpenFileNameA

kernel32

GetSystemInfo
lstrcmpiW
GetExitCodeProcess
VirtualProtectEx
GetStartupInfoW
lstrcmpA
GetVersion
SetErrorMode
FreeEnvironmentStringsA
lstrcpynA
GetNumberFormatA
GetSystemTime
GetConsoleMode
GetCPInfo
IsDebuggerPresent

user32

InsertMenuA
RemovePropA
GetWindowLongA
GetScrollInfo
SetScrollInfo
FindWindowA
GetKeyState
DialogBoxParamA
ScrollWindow
GetWindowRect
CallNextHookEx
GetForegroundWindow
FrameRect
SetDlgItemTextA
GetClassNameA
GetSubMenu
RedrawWindow
ShowOwnedPopups
EmptyClipboard
MapWindowPoints
UnhookWindowsHookEx
WaitMessage

advapi32

CryptCreateHash
GetSecurityDescriptorDacl
AdjustTokenPrivileges
OpenServiceA
IsValidSid
RegEnumKeyExW
RegCreateKeyExW
RegQueryValueExW
DeregisterEventSource
InitializeAcl
CryptGenRandom
RegOpenKeyExW
RegOpenKeyW

comctl32

ImageList_BeginDrag
ImageList_LoadImageW
ImageList_GetImageCount
ImageList_SetDragCursorImage
ImageList_Write
ImageList_AddMasked
ImageList_Create
ImageList_GetIcon
PropertySheetA

gdi32

GetWindowOrgEx
GetDCOrgEx
GetCharWidthW
GetDIBits
EnumEnhMetaFile
SetWorldTransform
Rectangle
EnumFontsA
CloseMetaFile
OffsetWindowOrgEx
StrokePath
EndPath

ole32

CoGetInterfaceAndReleaseStream
IsEqualGUID
CreateItemMoniker
CoInitialize
OleFlushClipboard
PropVariantClear
GetRunningObjectTable
CoCreateInstance
CoInitializeSecurity
OleRun
OleInitialize

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

80027cfe506457d59af352529077b89e

Headers

File Characteristics

Imports

msvcrt

comdlg32

kernel32

user32

advapi32

comctl32

gdi32

ole32

Sections

.text Size: 2KB - Virtual size: 2KB

.rdata Size: 3KB - Virtual size: 2KB

.data Size: 9KB - Virtual size: 46KB

.rsrc Size: 23KB - Virtual size: 22KB

.text
Size: 2KB - Virtual size: 2KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 9KB - Virtual size: 46KB

.rsrc
Size: 23KB - Virtual size: 22KB