252488d10ecb24306a95860191c53be5_JaffaCakes118

General

Target

252488d10ecb24306a95860191c53be5_JaffaCakes118
Size

97KB
MD5

252488d10ecb24306a95860191c53be5
SHA1

ab7bbec5ad4516a78a1d40eb971129bf62da0f21
SHA256

61ad340f11e74018f34af4941511279c831c28d2c5c6189a43495324c4fe6a0f
SHA512

7a99e4618210812a5eebda140654610282786cb94443e5e3405d9022afadce80fb93459777be5955bcf79e05d955cd83b14c0481ac175f338198ebbea7209e4d
SSDEEP

1536:51IjsLmIDpsg34biwAz90VbNj7tdAzXof1tqkzOO5cSi4iXHifKvtotM:5ajsbSgKAz9CdAzXE1YXPOKvtotM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
252488d10ecb24306a95860191c53be5_JaffaCakes118

Files

252488d10ecb24306a95860191c53be5_JaffaCakes118
.exe windows:5 windows x86 arch:x86

6d20643210585460c48340f02dc73568

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

version

VerQueryValueA
GetFileVersionInfoA

advapi32

RegQueryValueExW
InitializeAcl
RegDeleteValueA
RegEnumKeyExW
AllocateAndInitializeSid
RegDeleteKeyA
RegEnumKeyExA
FreeSid
RegSetValueExA
LookupPrivilegeValueA
RegDeleteValueW

gdi32

PlayMetaFileRecord
CreateDCW
UnrealizeObject
StretchBlt
PolyBezierTo
CreatePen
SetRectRgn
LPtoDP
RealizePalette
GetStockObject
BitBlt
TextOutA
GetCurrentPositionEx
GetTextAlign
AngleArc
CreatePalette

comctl32

ImageList_AddMasked
InitCommonControlsEx
InitCommonControls
CreateToolbarEx
ImageList_ReplaceIcon
ImageList_Create
PropertySheetA

msvcrt

_lock
_wtol
_mbsicmp
?terminate@@YAXXZ
fputc
_open_osfhandle
_wcsicmp
memcpy
??2@YAPAXI@Z
realloc
__p___initenv
__setusermatherr
_adjust_fdiv
bsearch
_strcmpi
_XcptFilter
wcstol
iswctype

kernel32

SetThreadPriority
GetTempFileNameA
GlobalUnlock
LocalAlloc
DeleteCriticalSection
ExitProcess
GetLastError
VirtualAlloc
CloseHandle

Sections

.text
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 36KB - Virtual size: 86KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6d20643210585460c48340f02dc73568

Headers

File Characteristics

Imports

version

advapi32

gdi32

comctl32

msvcrt

kernel32

Sections

.text Size: 26KB - Virtual size: 25KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 36KB - Virtual size: 86KB

.idata Size: 10KB - Virtual size: 23KB

.rsrc Size: 20KB - Virtual size: 19KB

.text
Size: 26KB - Virtual size: 25KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 36KB - Virtual size: 86KB

.idata
Size: 10KB - Virtual size: 23KB

.rsrc
Size: 20KB - Virtual size: 19KB