52e31d5038de594f43935d2b007565f5_JaffaCakes118

General

Target

52e31d5038de594f43935d2b007565f5_JaffaCakes118
Size

28KB
MD5

52e31d5038de594f43935d2b007565f5
SHA1

037981bd04a3f94d249a80b06e1efd57db928d8a
SHA256

1dcf34560a7d84c3c992b522fe9d44962f6e6b4efc3cb3563a1c09bfa6027b87
SHA512

6a7b5dd4aada79aad6a4f044c94058c62e49ede028e1ddde75fbde898cabca3c61d3f74198df9d8337c45baa7c080f793e187566c3ef3fc1935a298cb7dee93c
SSDEEP

384:lihsEv3B3zbFCdIQrGYD5WSnMzd5fjFY97KJ7kchn4G4:lEsQsdIj05WSMzd5r+xAz4G4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
52e31d5038de594f43935d2b007565f5_JaffaCakes118

Files

52e31d5038de594f43935d2b007565f5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6e0d73f464ddba9fa9cccae61ff19d56

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetLastError
GlobalFree
GetStdHandle
WriteFile
DeleteFileW
CopyFileW
GetFileTime
GetLastError
GetCPInfo
CreateThread
CreateDirectoryA
FindFirstFileA
CreateProcessA
OpenFileMappingA
OpenFile
CopyFileExA
DeleteFileA
GetFileSize
ReadConsoleA

comctl32

ImageList_Replace
ImageList_GetImageInfo
ImageList_Destroy
ImageList_Read
ImageList_Copy
ImageList_DragShowNolock
ImageList_Remove
ImageList_Merge
ImageList_GetIcon
ImageList_ReplaceIcon
ImageList_GetImageRect
ImageList_AddIcon
ImageList_DragEnter
ImageList_LoadImageW
ImageList_Draw
ImageList_AddMasked
ImageList_DragLeave

gdi32

AddFontResourceW
DeleteObject
AddFontResourceExA
SetTextColor
BitBlt
ExtTextOutA
AddFontResourceTracking
ClearBrushAttributes
AddFontResourceA
GetBitmapBits
CreateSolidBrush
CancelDC
GetClipBox
AddFontResourceExW
GetPixel
AddFontMemResourceEx
DeleteDC
GetBrushOrgEx
CopyMetaFileA
GetCurrentPositionEx
ClearBitmapAttributes

advapi32

RegDeleteValueA
RegReplaceKeyA
RegReplaceKeyW
RegDeleteKeyW
RegCreateKeyW
RegCreateKeyExA
RegEnumKeyExA
RegEnumKeyW
RegQueryValueExA
RegQueryValueExW
RegQueryValueA
RegQueryValueW
RegDeleteValueW
RegGetKeySecurity
RegDeleteKeyA
RegOpenKeyA
RegEnumValueW
RegCreateKeyExW
RegQueryInfoKeyA

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 5.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 780B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6e0d73f464ddba9fa9cccae61ff19d56

Headers

File Characteristics

Imports

kernel32

comctl32

gdi32

advapi32

Sections

.text Size: 3KB - Virtual size: 3KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 20KB - Virtual size: 5.1MB

.rsrc Size: 1024B - Virtual size: 780B

.text
Size: 3KB - Virtual size: 3KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 20KB - Virtual size: 5.1MB

.rsrc
Size: 1024B - Virtual size: 780B