133a41a2e06dace1e5debda321593f32_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

133a41a2e06dace1e5debda321593f32_JaffaCakes118
Size

179KB
MD5

133a41a2e06dace1e5debda321593f32
SHA1

29febaa0144cee8da37fc53a34b1098ec56b6abe
SHA256

94c4ce347ed481de1f3a764dcd682860937390e75ca1cde39e4f3577d55e0c06
SHA512

cdb42e57c9d52e6e0248cc61e5a948b8b524007d23e9fa3379837d1664a9d6c756cd8f660da8af92efb6e04b3b094822b301a6c4e97b082512caa6588c83be2d
SSDEEP

3072:MRCcfK0iGLER5uGj4DfruEV0bp19AQTXIdwuD:MOlR5D4Djuxbp19AQTXIdD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
133a41a2e06dace1e5debda321593f32_JaffaCakes118

Files

133a41a2e06dace1e5debda321593f32_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ead50d771b37f24df7820ee84956dbfb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

ImageList_Create
ImageList_Remove
ImageList_Write
ImageList_Add
ImageList_Draw
ImageList_Destroy
ImageList_Draw
ImageList_GetBkColor
ImageList_Remove
ImageList_Add

advapi32

RegOpenKeyA
RegOpenKeyExA
RegEnumValueA
RegLoadKeyA
RegCreateKeyA

kernel32

CreateFileA
GetFullPathNameA
ExitThread
GetModuleHandleA
ExitProcess
VirtualAlloc
ExitThread
LocalAlloc
GetModuleHandleW
IsBadReadPtr
lstrlenA
GetProcAddress
GetACP
LoadLibraryExA

msvcrt

strncmp
rand
wcstol

shlwapi

SHSetValueA
SHQueryValueExA
SHQueryInfoKeyA
PathGetCharTypeA
SHDeleteKeyA

gdi32

CreatePalette
GetCurrentPositionEx
LineTo
CreatePenIndirect
CreateCompatibleDC

shell32

SHFileOperationA
SHGetDesktopFolder

version

VerFindFileA

oleaut32

VariantChangeType
SysReAllocStringLen
SafeArrayUnaccessData
GetErrorInfo
SysStringLen
SysAllocStringLen
VariantCopyInd
SysFreeString
SafeArrayCreate
RegisterTypeLib
VariantChangeType

comdlg32

GetSaveFileNameA
GetFileTitleA
GetOpenFileNameA

ole32

CoCreateInstanceEx
WriteClassStm

user32

GetMenuItemCount
SetCapture

Sections

.text
Size: 42KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.DATA1
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.DATA7
Size: 1024B - Virtual size: 867B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.DATA3
Size: 126KB - Virtual size: 125KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.DATA9
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ead50d771b37f24df7820ee84956dbfb

Headers

File Characteristics

Imports

comctl32

advapi32

kernel32

msvcrt

shlwapi

gdi32

shell32

version

oleaut32

comdlg32

ole32

user32

Sections

.text Size: 42KB - Virtual size: 42KB

.data Size: 1KB - Virtual size: 1KB

.DATA1 Size: 2KB - Virtual size: 1KB

.DATA7 Size: 1024B - Virtual size: 867B

.DATA3 Size: 126KB - Virtual size: 125KB

.DATA9 Size: 3KB - Virtual size: 3KB

.rsrc Size: 1KB - Virtual size: 1KB

.text
Size: 42KB - Virtual size: 42KB

.data
Size: 1KB - Virtual size: 1KB

.DATA1
Size: 2KB - Virtual size: 1KB

.DATA7
Size: 1024B - Virtual size: 867B

.DATA3
Size: 126KB - Virtual size: 125KB

.DATA9
Size: 3KB - Virtual size: 3KB

.rsrc
Size: 1KB - Virtual size: 1KB