2a3ac47662b55f85bd1bd2beb9826685_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

2a3ac47662b55f85bd1bd2beb9826685_JaffaCakes118
Size

348KB
MD5

2a3ac47662b55f85bd1bd2beb9826685
SHA1

353a9cd72b26cb7dc0bdb47324b5d41ef01f6413
SHA256

455266375ce35157cb22c5baef1c2bbac42cefcbbe88eff04bb527acde604eb2
SHA512

8dab0026e36d2c08abdcfe641036cb5abfa25133b16b6c6982f7bea94b3fdff9e46f6729780e25b27a6b8015ec00e59ab11ce8cd0480c99671c356acb0999cd0
SSDEEP

6144:NRH/9e6kTFrTEUG/haRu+7ADVmQGt5/ur0gsAqVGCxapft6J:NN9e6aTPG/haRu6AslPGrvswC8pf6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2a3ac47662b55f85bd1bd2beb9826685_JaffaCakes118

Files

2a3ac47662b55f85bd1bd2beb9826685_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ebe55202b4935cb936fa91264d3cfa26

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

PathMakeSystemFolderW
PathUnquoteSpacesW
SHRegGetBoolUSValueA
StrToIntExA
SHGetValueA
PathQuoteSpacesW
SHRegGetUSValueA
PathFindExtensionW
SHRegOpenUSKeyW
PathIsUNCServerW
PathAddBackslashW
StrCSpnW
PathCanonicalizeW
PathSearchAndQualifyW
PathSetDlgItemPathW
PathCompactPathExW
SHDeleteKeyA
PathRemoveBlanksA
StrFormatByteSizeW
SHEnumKeyExW
SHRegWriteUSValueA
PathGetArgsA
PathIsContentTypeW
PathIsPrefixW
PathSkipRootA
PathStripPathW
PathRelativePathToA
PathIsFileSpecA
PathAddExtensionW
PathCanonicalizeA
SHDeleteValueW
PathIsUNCServerShareW
StrTrimW
PathCommonPrefixW
PathFindOnPathA
SHRegEnumUSKeyW
PathIsURLA
SHDeleteEmptyKeyA
PathRemoveFileSpecW
SHRegGetUSValueW
StrCpyW
PathRemoveFileSpecA
PathStripPathA
PathIsSystemFolderW
PathIsPrefixA
SHRegEnumUSKeyA
StrCSpnA
SHRegGetBoolUSValueW
SHRegCreateUSKeyW
PathSkipRootW
PathIsRootW
PathMatchSpecW
StrCmpW
PathIsRootA
PathIsFileSpecW
PathQuoteSpacesA
SHOpenRegStreamA
ChrCmpIW
PathGetArgsW
SHGetValueW
PathFindOnPathW
PathCompactPathW
SHCreateShellPalette
StrFormatByteSizeA
PathBuildRootW
StrNCatW
PathStripToRootW
PathFindFileNameA

msvcrt

_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit

user32

IsIconic
UnpackDDElParam
GetKeyboardLayoutNameA
GetMessagePos
VkKeyScanA
SetSystemCursor
CreateWindowExA
DdeDisconnectList
DefFrameProcA
DispatchMessageA
DdeEnableCallback
GrayStringA
SetWindowsHookA
GetSysColorBrush
FreeDDElParam
SetDlgItemTextW
SetCapture
SetProcessWindowStation
SetDlgItemTextA
GetPropW
GetDesktopWindow
EnumDisplaySettingsA
AppendMenuA
TranslateAcceleratorW
SetPropA
ChangeDisplaySettingsExW
EnableWindow
UnregisterClassA
OpenIcon
CheckMenuRadioItem
GetWindowRect
HideCaret
UnregisterClassW
GetWindowLongA
DrawTextExW
IsMenu
DestroyCursor
GetKeyboardType
GetClipboardData
SetKeyboardState
CreateDialogIndirectParamA
ShowScrollBar
GetIconInfo
DefWindowProcW
LoadCursorFromFileA
EnumDesktopWindows
DdeGetLastError
LoadCursorW
ScreenToClient
GetLastActivePopup
SetDoubleClickTime
GetPriorityClipboardFormat
SetMenuDefaultItem
DlgDirSelectComboBoxExW
FrameRect
IsWindowUnicode
RemoveMenu
CallMsgFilterA
ChildWindowFromPointEx
CheckRadioButton
DispatchMessageW
GetCursor
GetMenuItemInfoW
GetDlgItemTextA
IsRectEmpty
TranslateAcceleratorA
GetForegroundWindow
LoadAcceleratorsA
InsertMenuItemW
EnableScrollBar
SetForegroundWindow
GetMenuContextHelpId
LoadCursorA
GetSystemMetrics
CreateDialogParamA
AttachThreadInput
TranslateMDISysAccel
SetWindowsHookExA
ShowOwnedPopups
ChangeMenuA
UpdateWindow
WINNLSEnableIME
GetCursorPos
MapVirtualKeyExA
ToAscii
GetWindowModuleFileNameW
GetWindowLongW
GetUpdateRect
DdeQueryStringA
DdeInitializeA

kernel32

GetStartupInfoA
ExitProcess
EnumResourceNamesW
FlushFileBuffers
GlobalWire
GetStringTypeExA
GetDateFormatW
GlobalMemoryStatus
AllocConsole
GetModuleHandleA
Toolhelp32ReadProcessMemory
GetStartupInfoA
ExitProcess
EnumResourceNamesW
FlushFileBuffers
GlobalWire
GetStringTypeExA
GetDateFormatW
GlobalMemoryStatus
AllocConsole
GetModuleHandleA
Toolhelp32ReadProcessMemory

comdlg32

FindTextA

advapi32

RegDeleteValueA

Sections

.text
Size: 112KB - Virtual size: 109KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 2.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ebe55202b4935cb936fa91264d3cfa26

Headers

File Characteristics

Imports

shlwapi

msvcrt

user32

kernel32

comdlg32

advapi32

Sections

.text Size: 112KB - Virtual size: 109KB

.rdata Size: 8KB - Virtual size: 5KB

.data Size: 8KB - Virtual size: 2.7MB

.rsrc Size: 28KB - Virtual size: 26KB

.reloc Size: 12KB - Virtual size: 10KB

.text
Size: 112KB - Virtual size: 109KB

.rdata
Size: 8KB - Virtual size: 5KB

.data
Size: 8KB - Virtual size: 2.7MB

.rsrc
Size: 28KB - Virtual size: 26KB

.reloc
Size: 12KB - Virtual size: 10KB