15d0f8a254633e011621860eb0d98e82_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

15d0f8a254633e011621860eb0d98e82_JaffaCakes118
Size

88KB
MD5

15d0f8a254633e011621860eb0d98e82
SHA1

c42e35693d0b3dcc5dcbfb4865dba5878517c53a
SHA256

05d7b1eb97005bf63f574d6ff7b09cd0c58b1aa8f2b6a0163b2bf68d03484048
SHA512

c0ff5a51d2e0c9419d5002850a84587ea925aaf649d9835b7d3a004c3587624ee96e8e3a4131bc38e987215778d20499974853204c955ac1b958ada734ebd079
SSDEEP

1536:AoQIKo6iHk1t7qaeJdb3rydGs+af7f6QEiRvbl9lH:ANIKUytWaKb33glblz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
15d0f8a254633e011621860eb0d98e82_JaffaCakes118

Files

15d0f8a254633e011621860eb0d98e82_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e31641bd43f93614381e0800122e642a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA
GetStringTypeA
GetCommandLineA
GlobalAlloc
GetCommandLineA
HeapAlloc
GetCommandLineA
ExitProcess
GetCommandLineA
GetModuleHandleA
GetCommandLineA
WideCharToMultiByte
GetCommandLineA
GetFileType
GetCommandLineA
FreeLibrary
GetCommandLineA
lstrcmpA
GetCommandLineA

user32

DialogBoxParamA
DrawTextW
IsWindow
InsertMenuA
CopyImage
LoadCursorA
AppendMenuW
LoadMenuA
EndDialog
GetWindowTextLengthA
CopyIcon
GetCursor
GetDlgItem
BlockInput
GetMenu
IsMenu
CopyRect
CloseWindow
GetFocus
GetWindowTextA
CreateIcon
GetDC
AlignRects
DialogBoxParamW
CalcMenuBar
DrawTextA
AppendMenuA
DrawIconEx
DrawIcon

advapi32

RegQueryValueA
RegOpenKeyW
RegQueryInfoKeyW
RegFlushKey
RegCreateKeyW
RegEnumKeyW
RegQueryInfoKeyA
RegDeleteValueA
RegEnumValueA
RegOpenKeyA
RegEnumKeyA
RegLoadKeyW
RegCreateKeyExW
RegReplaceKeyW
RegEnumValueW
RegGetKeySecurity
RegLoadKeyA
RegEnumKeyExA
RegEnumKeyExW
RegDeleteValueW
RegOpenKeyExA
RegDeleteKeyW
RegQueryValueExW
RegOpenKeyExW
RegReplaceKeyA
RegQueryValueExA
RegQueryValueW
RegCreateKeyExA
RegDeleteKeyA
RegReplaceKeyA
RegQueryInfoKeyW
RegFlushKey
RegEnumValueA
RegLoadKeyA
RegCreateKeyExA
RegReplaceKeyW
RegQueryValueExA
RegCreateKeyExW
RegOpenKeyA
RegDeleteValueA
RegEnumKeyA
RegDeleteKeyA
RegOpenKeyExW
RegQueryInfoKeyA
RegQueryValueW
RegCreateKeyW
RegDeleteValueW
RegEnumValueW
RegDeleteKeyW
RegQueryValueExW
RegEnumKeyExA
RegQueryValueA
RegEnumKeyW
RegEnumKeyExW
RegLoadKeyW
RegOpenKeyExA
RegGetKeySecurity
RegOpenKeyW

Sections

.tedt
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 47KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edaaa
Size: 9KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 924B

IMAGE_SCN_MEM_READ

.raac
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e31641bd43f93614381e0800122e642a

Headers

File Characteristics

Imports

kernel32

user32

advapi32

Sections

.tedt Size: 18KB - Virtual size: 18KB

.rdata Size: 47KB - Virtual size: 46KB

.edaaa Size: 9KB - Virtual size: 35KB

.bss Size: - Virtual size: 924B

.raac Size: 8KB - Virtual size: 8KB

.rsrc Size: 1024B - Virtual size: 4KB

.tedt
Size: 18KB - Virtual size: 18KB

.rdata
Size: 47KB - Virtual size: 46KB

.edaaa
Size: 9KB - Virtual size: 35KB

.bss
Size: - Virtual size: 924B

.raac
Size: 8KB - Virtual size: 8KB

.rsrc
Size: 1024B - Virtual size: 4KB