2c585259e15a138a5b913d4766ffd0e7_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

2c585259e15a138a5b913d4766ffd0e7_JaffaCakes118
Size

163KB
MD5

2c585259e15a138a5b913d4766ffd0e7
SHA1

1eb133dc682bd3337bbce671c2e6957788e97bc9
SHA256

ae46f6bdbc277ac830b141322d1df3a9e914058c9ec0b0f9991c0569bae92bb0
SHA512

a3672893e5efa23cccfc9b89cb3a83791c851cfcc9c69456bc6e2099e0486e42f18ecd5e36593da71e0e2c7225c2a0607b2e48c7bf9f27d4025ab8c60a38cf0a
SSDEEP

3072:7VcVvlkTrSyexuKxjhVT09fpbBoFEkmQ76C7F6SLOPStViCYo8:e9lkT+ymZjXIdBuFEkr76CB6AQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2c585259e15a138a5b913d4766ffd0e7_JaffaCakes118

Files

2c585259e15a138a5b913d4766ffd0e7_JaffaCakes118
.exe windows:5 windows x86 arch:x86

75895f1873ccf65d137e7f93f69c47e2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

fwsfl.pdb

Imports

user32

GetParent
EndDialog
GetThreadDesktop
GetWindowTextW
OffsetRect
SendMessageW
SetWindowLongW
SetWindowTextW
ShowWindow
EnableWindow
GetWindowLongW
DialogBoxParamW

msvcrt

wcscmp
_except_handler3

kernel32

DisableThreadLibraryCalls
ExitProcess
GetCommandLineA
GetComputerNameW
CompareStringW
GetCurrentThreadId
GetLastError
GetModuleHandleA
GetModuleHandleW
GetProcAddress
GetSystemTimeAsFileTime
GetTickCount
GetWindowsDirectoryW
LocalAlloc
MultiByteToWideChar
RtlUnwind
SetLastError
SetUnhandledExceptionFilter
TerminateProcess
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
lstrcmpiW
CloseHandle
GetCurrentProcess

shell32

ShellExecuteW
SHSetUnreadMailCountW
SHOpenFolderAndSelectItems

advapi32

AddAce
CloseServiceHandle
RegSetValueExW
RegSetKeySecurity
RegQueryValueExW
RegOpenKeyExW
RegDeleteValueW
RegCreateKeyExW
RegCloseKey
OpenServiceW
OpenSCManagerW
InitializeSid
ConvertStringSecurityDescriptorToSecurityDescriptorW
ControlService
ChangeServiceConfigW

setupapi

SetupLogErrorW
CM_Create_DevNodeA
SetupCloseLog
SetupDiCreateDevRegKeyW
SetupDiSetClassInstallParamsW
SetupOpenLog
SetupDiOpenDevRegKey
SetupDiInstallDevice
SetupDiGetDeviceRegistryPropertyW
SetupDiGetClassInstallParamsW
CMP_Report_LogOn

gdi32

CloseEnhMetaFile

Sections

.text
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 71KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 45KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

75895f1873ccf65d137e7f93f69c47e2

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

user32

msvcrt

kernel32

shell32

advapi32

setupapi

gdi32

Sections

.text Size: 39KB - Virtual size: 39KB

.rdata Size: 71KB - Virtual size: 70KB

.data Size: 45KB - Virtual size: 47KB

.rsrc Size: 6KB - Virtual size: 6KB

.text
Size: 39KB - Virtual size: 39KB

.rdata
Size: 71KB - Virtual size: 70KB

.data
Size: 45KB - Virtual size: 47KB

.rsrc
Size: 6KB - Virtual size: 6KB