52d8376ff242c276ebd2a8b701499e0e_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

52d8376ff242c276ebd2a8b701499e0e_JaffaCakes118
Size

448KB
MD5

52d8376ff242c276ebd2a8b701499e0e
SHA1

f725e0dacafa13f4442c3ead04707dcbd3d4cd2b
SHA256

c575a7018e558afdb2ab397587d6fee936fc9567d50ac33f61ca7001f833316f
SHA512

4ee4ec48ae1e53894423d8be7bb4abf07d4670055981eb03f8147f87f5ba1c7d7c8d0eba49c4cbb69a205fce1a7ede82f39964a531d9451449a82e7d0cf25756
SSDEEP

12288:OAAWQwTy/sN7rRN7pQAFuck2qADFENAnS:OAAcRFTZU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
52d8376ff242c276ebd2a8b701499e0e_JaffaCakes118

Files

52d8376ff242c276ebd2a8b701499e0e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

56eef14c501b7c72db973aee531c7ff6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

DragQueryFileA
RealShellExecuteA
SHFormatDrive
SHQueryRecycleBinW
SHGetSettings
SHGetFileInfo
SHGetPathFromIDListW
SHGetFileInfoA
DragQueryPoint
SHGetFileInfoW
SHFileOperationW
SheSetCurDrive
SHGetSpecialFolderPathA
DoEnvironmentSubstW

advapi32

InitiateSystemShutdownA
RegSetValueExW
CryptSetKeyParam
CryptEncrypt
RegLoadKeyA
LookupPrivilegeNameW
RegCreateKeyExA
RegQueryValueA
LookupSecurityDescriptorPartsA
RegQueryValueExW
RegQueryInfoKeyA
RegCreateKeyExW
RegSetValueW

user32

GetKeyboardState
OpenWindowStationA
MessageBoxA
SetWindowLongW
GetClassLongW
RemoveMenu
ShowCursor
InvalidateRect
IsWindowEnabled
LoadMenuIndirectA
GetDlgCtrlID
GetDC
DialogBoxParamA
CopyRect
RealGetWindowClass

gdi32

RoundRect
CreateEllipticRgnIndirect
GdiSetBatchLimit
PolyPolygon
CopyMetaFileA
CreateMetaFileW
CreateDIBPatternBrushPt
CreateMetaFileA
GetTextExtentPoint32A
GetBkMode
GetTextExtentExPointA
EnumFontFamiliesA
GdiPlayScript
CreateDIBSection
GetTextCharset
EnumEnhMetaFile
GetCharWidthFloatA
DeleteMetaFile
EnumObjects

kernel32

VirtualAlloc
LCMapStringW
SetHandleCount
InterlockedExchange
GetStringTypeA
GetModuleFileNameA
GetLastError
EnumResourceLanguagesW
QueryPerformanceCounter
HeapDestroy
FreeEnvironmentStringsW
SetEvent
LeaveCriticalSection
SetConsoleTitleA
GetCurrentThread
GetEnvironmentStringsW
CreateToolhelp32Snapshot
GetVersion
GetStringTypeW
GetOEMCP
GetCPInfo
EnterCriticalSection
GetCurrentThreadId
DeleteCriticalSection
IsBadWritePtr
ExitProcess
GetSystemTimeAsFileTime
TlsSetValue
GetStdHandle
WideCharToMultiByte
GetPrivateProfileStructW
TlsGetValue
GetACP
MultiByteToWideChar
HeapFree
VirtualFree
TerminateProcess
LoadLibraryA
InitializeCriticalSection
FreeEnvironmentStringsA
HeapAlloc
TlsAlloc
LCMapStringA
RtlUnwind
VirtualQuery
WriteFile
GetCurrentProcessId
CompareStringW
GetFileType
GetModuleHandleA
GetProcAddress
TlsFree
GetConsoleCP
GetCommandLineA
GetEnvironmentStrings
SetLastError
CreateMutexW
HeapReAlloc
GetTickCount
UnhandledExceptionFilter
GetCurrentProcess
HeapCreate
GetStartupInfoA

Sections

.text
Size: 158KB - Virtual size: 157KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 272KB - Virtual size: 297KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

56eef14c501b7c72db973aee531c7ff6

Headers

File Characteristics

Imports

shell32

advapi32

user32

gdi32

kernel32

Sections

.text Size: 158KB - Virtual size: 157KB

.data Size: 272KB - Virtual size: 297KB

.rsrc Size: 17KB - Virtual size: 16KB

.text
Size: 158KB - Virtual size: 157KB

.data
Size: 272KB - Virtual size: 297KB

.rsrc
Size: 17KB - Virtual size: 16KB