3ebcc554789886f7b547f538567b3cad_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

3ebcc554789886f7b547f538567b3cad_JaffaCakes118
Size

94KB
MD5

3ebcc554789886f7b547f538567b3cad
SHA1

65c8fe29d06050fe8bdc6ce43b2b0e8e7fd3e4ff
SHA256

d2c41be20c9d5069f070b8e4bf15bacd347025cb71b9315340595a7a14f07e31
SHA512

3ab3a296fbcc4a7a6f50e5325259e59af79fe2530e8353d10d3f694b820efc3c49783c5a8cfb34e2c285ed626daa40ccf5ad54294f36b910a3ead52bba3470ee
SSDEEP

1536:cHKOozwvBi0+nYB/3SGTteH/PSv2L+PB06QWAlUmhMtVS7QBCzTFXtN51n1W:HypiTYB/NJefPEm+PxXmWtVXBUp51n1W

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3ebcc554789886f7b547f538567b3cad_JaffaCakes118

Files

3ebcc554789886f7b547f538567b3cad_JaffaCakes118
.exe windows:1 windows x86 arch:x86

ce6b03b53ae0d27c1fc927c1a1223761

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

ImageList_SetIconSize
FlatSB_GetScrollRange
ImageList_LoadImageA
PropertySheetA
CreateStatusWindowA
ImageList_DrawEx
ImageList_BeginDrag

kernel32

ReadConsoleOutputW
SetConsoleHardwareState
VirtualFree
GetVolumeNameForVolumeMountPointW
WriteFileGather
IsValidCodePage
GetProcAddress
GetProcAddress
GetBinaryType
SetVDMCurrentDirectories
VirtualProtect
GetConsoleWindow
ReplaceFileA
IsDBCSLeadByte
VirtualAlloc
LoadLibraryA

crtdll

_CIexp
strtod
_ismbcdigit
_spawnlpe

comdlg32

ReplaceTextA
ChooseFontA
GetFileTitleA
GetFileTitleW
PrintDlgExA
PrintDlgExW
FindTextW
PrintDlgA
GetSaveFileNameA
ChooseColorW
GetOpenFileNameA
PageSetupDlgW
PageSetupDlgA
CommDlgExtendedError
ReplaceTextW
FindTextA

shell32

SHChangeNotify
FindExecutableA
SHEmptyRecycleBinA
InternalExtractIconListW
SHGetMalloc
ExtractAssociatedIconExA

gdi32

GetCurrentPositionEx
SetMapperFlags
SetLayout
OffsetWindowOrgEx
StretchDIBits
GetCharABCWidthsW
EngStretchBlt
ExcludeClipRect
QueryFontAssocStatus
GetTextCharsetInfo
SelectPalette
RealizePalette
PATHOBJ_bEnum

advapi32

SetTraceCallback
InitializeSid
OpenThreadToken
EnumDependentServicesA
QueryRecoveryAgentsOnEncryptedFile
RegReplaceKeyW
EqualPrefixSid
ImpersonateLoggedOnUser
CryptDuplicateHash
LsaAddPrivilegesToAccount
SystemFunction028
CryptEnumProvidersA
SystemFunction012
GetPrivateObjectSecurity
GetTokenInformation
OpenSCManagerA

Sections

.text
Size: 88KB - Virtual size: 88KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 12KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

ce6b03b53ae0d27c1fc927c1a1223761

Headers

File Characteristics

Imports

comctl32

kernel32

crtdll

comdlg32

shell32

gdi32

advapi32

Sections

.text Size: 88KB - Virtual size: 88KB

.data Size: - Virtual size: 12KB

.idata Size: 5KB - Virtual size: 8KB

.text
Size: 88KB - Virtual size: 88KB

.data
Size: - Virtual size: 12KB

.idata
Size: 5KB - Virtual size: 8KB