4112fd340e8dfebb28b052b7f1deca9e_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

4112fd340e8dfebb28b052b7f1deca9e_JaffaCakes118
Size

199KB
MD5

4112fd340e8dfebb28b052b7f1deca9e
SHA1

35e44ba9a1ee80c716f3d7ebeac25c3afdb9d587
SHA256

bc9e0557a815f27a99263e50011b42edda219550b98071ebc7162b252ec8b2d4
SHA512

bf85da3c484203eb54f19dfe5c8b7f814def605dab19f6f18d17954c11a6e9eb81f15280209025fcfbd799b02603a152a07da7247648b42fbd2fe2bb95dd9c3f
SSDEEP

3072:D+CWCOvZyol2dVZZ7sHQLUzc9hCCdbJrWZga:rcvICIZZgHQLL9hCCf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4112fd340e8dfebb28b052b7f1deca9e_JaffaCakes118

Files

4112fd340e8dfebb28b052b7f1deca9e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e9c5b4718337d388a7a1641018adc992

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

SetPixel
CreateDIBSection
GetDCOrgEx
SaveDC
GetRgnBox
CreateCompatibleDC
GetObjectA
RestoreDC
GetDIBits

comdlg32

FindTextA
GetOpenFileNameA
GetSaveFileNameA
ChooseColorA
GetOpenFileNameA
GetFileTitleA
ChooseColorA
GetSaveFileNameA

version

VerQueryValueA
VerFindFileA
VerFindFileA
VerQueryValueA
VerInstallFileA
VerFindFileA
VerQueryValueA

kernel32

LoadLibraryA
IsBadReadPtr
LocalAlloc
ExitProcess
GetModuleHandleA
GetVersionExA
GetLastError
LoadLibraryExA
IsBadHugeReadPtr
ExitThread
GetProcAddress
VirtualAlloc
Sleep

user32

CharLowerA
GetKeyboardState

shlwapi

PathFileExistsA
SHSetValueA
SHQueryValueExA
SHQueryInfoKeyA

ole32

CoCreateFreeThreadedMarshaler

msvcrt

strcmp
mbstowcs
clock
_acmdln
fabs
malloc
exp
log10
memcmp

oleaut32

SysFreeString
VariantChangeType
SafeArrayPtrOfIndex
SafeArrayCreate

shell32

SHGetSpecialFolderLocation
SHGetFolderPathA

advapi32

RegCreateKeyExA
RegOpenKeyA

comctl32

ImageList_Read
ImageList_Write

Sections

.text
Size: 56KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 857B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.DATA9
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.DATA4
Size: 118KB - Virtual size: 118KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.DATA0
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.DATA7
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e9c5b4718337d388a7a1641018adc992

Headers

File Characteristics

Imports

gdi32

comdlg32

version

kernel32

user32

shlwapi

ole32

msvcrt

oleaut32

shell32

advapi32

comctl32

Sections

.text Size: 56KB - Virtual size: 55KB

.data Size: 1024B - Virtual size: 857B

.DATA9 Size: 2KB - Virtual size: 1KB

.DATA4 Size: 118KB - Virtual size: 118KB

.DATA0 Size: 16KB - Virtual size: 15KB

.DATA7 Size: 3KB - Virtual size: 3KB

.rsrc Size: 1KB - Virtual size: 1KB

.text
Size: 56KB - Virtual size: 55KB

.data
Size: 1024B - Virtual size: 857B

.DATA9
Size: 2KB - Virtual size: 1KB

.DATA4
Size: 118KB - Virtual size: 118KB

.DATA0
Size: 16KB - Virtual size: 15KB

.DATA7
Size: 3KB - Virtual size: 3KB

.rsrc
Size: 1KB - Virtual size: 1KB