3b364e527874fa3eead34a76b3701b67_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

3b364e527874fa3eead34a76b3701b67_JaffaCakes118
Size

110KB
MD5

3b364e527874fa3eead34a76b3701b67
SHA1

0537d36c1054865f689e8849539e5c3877959c7d
SHA256

f6ab463dffcff167e7ee0f388fd0984a94073776a711fdc28db7c42cea3ea671
SHA512

afecf6bf3f10d602e20a6a04b486767c766e990ddcbf2ce5034d11997808441fff61730412af6f935da8ef337c801e4d6227749dc63fe3564f8218f73e0682bb
SSDEEP

1536:2W4KVrTxAB46ymMCAR+KN9ZaT9PSK0UxTfoOskmuiR93mwuKpCuJazw7E+2GLZ:2gNTxw49R3N91YToOLTetnp3azZGN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3b364e527874fa3eead34a76b3701b67_JaffaCakes118

Files

3b364e527874fa3eead34a76b3701b67_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a157397dc5d84f5a5a180b5ac3fc52dd

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegQueryValueA
RegLoadKeyA
RegOpenKeyA
RegQueryValueExW
RegDeleteKeyW
RegReplaceKeyA
RegQueryValueW
RegEnumValueW
RegEnumKeyA
RegQueryInfoKeyA
RegDeleteKeyA
RegOpenKeyExW
RegEnumValueA
RegQueryValueExA
RegDeleteValueW
RegCreateKeyExW

comctl32

ImageList_DragShowNolock
ImageList_LoadImage
ImageList_GetImageCount
ImageList_GetIconSize
ImageList_DragLeave
ImageList_GetDragImage
ImageList_LoadImageA
ImageList_Read
ImageList_Replace
ImageList_BeginDrag
ImageList_DragMove
ImageList_DrawEx
ImageList_Merge
ImageList_EndDrag
ImageList_Draw
ImageList_ReplaceIcon
ImageList_GetImageRect
ImageList_Destroy
ImageList_DrawIndirect
InitCommonControls

kernel32

GetCommandLineA
FreeLibrary
lstrcmpiA
Sleep
GetDateFormatA
lstrcmpA
SetLastError
GetCPInfo
lstrcpyA
WideCharToMultiByte
GetModuleHandleA
DeleteFileA
GetFileSize
GetStdHandle
lstrcpynA
GlobalAlloc

user32

CloseWindow
GetWindowTextLengthA
LoadMenuA
GetFocus
AppendMenuA
AlignRects
DrawTextA
DrawIconEx
GetCursor
CopyRect
GetMenu
BlockInput
EndDialog
CopyImage
IsWindow
CopyIcon
CreateIcon
IsMenu
DialogBoxParamW

Sections

.aGJA
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.PtKhH
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.dgkFPW
Size: 6KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xBPzR
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ

.wxUo
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a157397dc5d84f5a5a180b5ac3fc52dd

Headers

File Characteristics

Imports

advapi32

comctl32

kernel32

user32

Sections

.aGJA Size: 11KB - Virtual size: 11KB

.PtKhH Size: 28KB - Virtual size: 28KB

.dgkFPW Size: 6KB - Virtual size: 43KB

.xBPzR Size: - Virtual size: 2KB

.wxUo Size: 2KB - Virtual size: 1KB

.rsrc Size: 1024B - Virtual size: 4KB

.aGJA
Size: 11KB - Virtual size: 11KB

.PtKhH
Size: 28KB - Virtual size: 28KB

.dgkFPW
Size: 6KB - Virtual size: 43KB

.xBPzR
Size: - Virtual size: 2KB

.wxUo
Size: 2KB - Virtual size: 1KB

.rsrc
Size: 1024B - Virtual size: 4KB