39e95a8cc29ceea6b5b2c682b9d79a18_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

39e95a8cc29ceea6b5b2c682b9d79a18_JaffaCakes118
Size

85KB
MD5

39e95a8cc29ceea6b5b2c682b9d79a18
SHA1

11051b07749418c57e5aab8ac1191312a8c2498f
SHA256

e56e6ceae7f4d92551b7c757028e6d05fb1eb71438f7aa7f1a9ec94c346ecb7e
SHA512

0a480ffde10fbf7d755c69f598b626d9a8ae6bc9b7c5c54d09f531b02df13d2dae1da609534241c25cf69939876c0e9f332a8f3e6adec4fa5825ae0454f3b9e2
SSDEEP

1536:2W4KVrTxAB46ymMCAR+KN9Zaxb9IQ+gb+cCBLi5:2gNTxw49R3N9Wr+gZCo5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
39e95a8cc29ceea6b5b2c682b9d79a18_JaffaCakes118

Files

39e95a8cc29ceea6b5b2c682b9d79a18_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a157397dc5d84f5a5a180b5ac3fc52dd

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegQueryValueA
RegLoadKeyA
RegOpenKeyA
RegQueryValueExW
RegDeleteKeyW
RegReplaceKeyA
RegQueryValueW
RegEnumValueW
RegEnumKeyA
RegQueryInfoKeyA
RegDeleteKeyA
RegOpenKeyExW
RegEnumValueA
RegQueryValueExA
RegDeleteValueW
RegCreateKeyExW

comctl32

ImageList_DragShowNolock
ImageList_LoadImage
ImageList_GetImageCount
ImageList_GetIconSize
ImageList_DragLeave
ImageList_GetDragImage
ImageList_LoadImageA
ImageList_Read
ImageList_Replace
ImageList_BeginDrag
ImageList_DragMove
ImageList_DrawEx
ImageList_Merge
ImageList_EndDrag
ImageList_Draw
ImageList_ReplaceIcon
ImageList_GetImageRect
ImageList_Destroy
ImageList_DrawIndirect
InitCommonControls

kernel32

GetCommandLineA
FreeLibrary
lstrcmpiA
Sleep
GetDateFormatA
lstrcmpA
SetLastError
GetCPInfo
lstrcpyA
WideCharToMultiByte
GetModuleHandleA
DeleteFileA
GetFileSize
GetStdHandle
lstrcpynA
GlobalAlloc

user32

CloseWindow
GetWindowTextLengthA
LoadMenuA
GetFocus
AppendMenuA
AlignRects
DrawTextA
DrawIconEx
GetCursor
CopyRect
GetMenu
BlockInput
EndDialog
CopyImage
IsWindow
CopyIcon
CreateIcon
IsMenu
DialogBoxParamW

Sections

.aGJA
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.PtKhH
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.dgkFPW
Size: 6KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xBPzR
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ

.wxUo
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a157397dc5d84f5a5a180b5ac3fc52dd

Headers

File Characteristics

Imports

advapi32

comctl32

kernel32

user32

Sections

.aGJA Size: 11KB - Virtual size: 11KB

.PtKhH Size: 28KB - Virtual size: 28KB

.dgkFPW Size: 6KB - Virtual size: 43KB

.xBPzR Size: - Virtual size: 2KB

.wxUo Size: 2KB - Virtual size: 1KB

.rsrc Size: 1024B - Virtual size: 4KB

.aGJA
Size: 11KB - Virtual size: 11KB

.PtKhH
Size: 28KB - Virtual size: 28KB

.dgkFPW
Size: 6KB - Virtual size: 43KB

.xBPzR
Size: - Virtual size: 2KB

.wxUo
Size: 2KB - Virtual size: 1KB

.rsrc
Size: 1024B - Virtual size: 4KB