158600d6605523d8791c83fa175986f9_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

158600d6605523d8791c83fa175986f9_JaffaCakes118
Size

97KB
MD5

158600d6605523d8791c83fa175986f9
SHA1

358a11c04c98d370ccda752762263f78a146f767
SHA256

d582a6804010bb5e856fee29c4fd9d58ba5ca4ff9780756a2e201e423319f5a4
SHA512

25b571da13bbef7180ae6ec5f84b99a0d921d2aff0b1d21c9eb5a1c35dec48490a36d42bb9926fa157916193490c875019cf38ae02b9824f777bf7edf32d6d60
SSDEEP

1536:OB1aAlHylIZkSFgw0zYbMKRo2B6SDoZG2eL3JNYHGJc+UhpkNszJgESnCdV9G98P:k0cFWXmaYfYHT+6q6zJfVzGsmfTL/5c

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
158600d6605523d8791c83fa175986f9_JaffaCakes118

Files

158600d6605523d8791c83fa175986f9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f9fa99ddb7e725d3ee8034f72282a1ac

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

realloc
__p__commode
strncpy
__dllonexit
memset
__set_app_type
fwrite
getenv
__getmainargs
_initterm
_adjust_fdiv
fputs
__p__fmode
free
_exit
_acmdln
calloc
_except_handler3
__setusermatherr
__p__environ

kernel32

GetStartupInfoA
FreeLibrary
GetProcAddress
GetTimeZoneInformation
GetWindowsDirectoryA
GetLocaleInfoA
WriteFile
lstrcatA
GetUserDefaultLangID
LoadLibraryExW
ReadFile
FileTimeToSystemTime
GlobalUnlock
CreateProcessA

advapi32

RegOpenKeyExW
CryptGenRandom
OpenServiceW
EqualSid
DeleteService
SetSecurityDescriptorDacl
RegFlushKey
OpenServiceA
InitiateSystemShutdownA
RegDeleteKeyW
CryptCreateHash
RegSetValueExA
RegQueryInfoKeyW
CryptDestroyHash
RegDeleteKeyA
CryptReleaseContext
RegOpenKeyA

comctl32

ImageList_SetBkColor
ImageList_DragEnter
ImageList_LoadImageW
CreatePropertySheetPageA
ImageList_Add
ImageList_Replace
ImageList_AddMasked
ImageList_SetIconSize
ImageList_DrawEx
ImageList_Destroy
ImageList_Create

user32

GetKeyState
IsDialogMessageA
IsWindowEnabled
DrawIcon
GetWindowLongA
EndPaint
GetWindow
EnableWindow
CallWindowProcA
FillRect
GetDlgItem
CreatePopupMenu
RemovePropA

oleaut32

GetActiveObject
SysReAllocStringLen
CreateErrorInfo
LoadTypeLib
SafeArrayRedim
SafeArrayPtrOfIndex
SafeArrayPutElement
VariantInit
SysStringByteLen
SafeArrayUnaccessData
VariantCopyInd

ole32

PropVariantClear
StgOpenStorageOnILockBytes
OleInitialize
ReleaseStgMedium
CoGetInterfaceAndReleaseStream
CoInitialize
ProgIDFromCLSID
CLSIDFromString
CoLoadLibrary
CoSetProxyBlanket
CoTaskMemAlloc

gdi32

SetTextJustification
SetArcDirection
CreateRectRgn
PlayEnhMetaFile
SaveDC
SetPolyFillMode
Polyline
GetTextFaceA
StartDocW
CreatePatternBrush
SetWindowOrgEx
GetWindowExtEx

Sections

.text
Size: 55KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f9fa99ddb7e725d3ee8034f72282a1ac

Headers

File Characteristics

Imports

msvcrt

kernel32

advapi32

comctl32

user32

oleaut32

ole32

gdi32

Sections

.text Size: 55KB - Virtual size: 55KB

.data Size: 25KB - Virtual size: 24KB

.rsrc Size: 16KB - Virtual size: 15KB

.text
Size: 55KB - Virtual size: 55KB

.data
Size: 25KB - Virtual size: 24KB

.rsrc
Size: 16KB - Virtual size: 15KB