56cb2361a3e6ee3d17c447636679b28e_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

56cb2361a3e6ee3d17c447636679b28e_JaffaCakes118
Size

361KB
MD5

56cb2361a3e6ee3d17c447636679b28e
SHA1

80de0ac611d18244dcf3644842592e74c8bff53f
SHA256

b68297d6990d5963e38cfc0c3c1afe266a1458cf7ff18e92aa7b6624996f0304
SHA512

bafd28a8d928d5ac095c5551c9191c206e75918ff12f53b29c884e5455d9b2eb0f4e896246856303a8fffa7956479f94a557d1ff577b60276d522695f962c128
SSDEEP

6144:JF7QhR9YGCYAmmvEBaCJy5RWML4aOJg/AisMg+dhj98CilzTVJRAfABRRl/xV:77QhR9y3vE7sWMLxW+hB3ilzvRyaRr7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
56cb2361a3e6ee3d17c447636679b28e_JaffaCakes118

Files

56cb2361a3e6ee3d17c447636679b28e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

25fdf4d09f444ddb52db09ade98b008e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

BringWindowToTop
EndDeferWindowPos
CallWindowProcA
GetClientRect

ole32

CoTaskMemFree
CreateAntiMoniker
CoUnmarshalInterface
OleGetIconOfClass

oleaut32

OleLoadPicture

advapi32

RegSetValueA
RegFlushKey
RegUnLoadKeyA
DecryptFileA

kernel32

MultiByteToWideChar
LoadLibraryA
LCMapStringA
VirtualAlloc
GetOEMCP
GetACP
LCMapStringW
GetStringTypeA
GetStringTypeW
HeapReAlloc
FoldStringA
LocalSize
WideCharToMultiByte
VirtualLock
WriteProfileSectionA
GetModuleHandleA
GetProcAddress
ExitProcess
GetStartupInfoA
GetCommandLineA
GetVersion
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
GetLastError
GetFileType
SetFilePointer
SetHandleCount
GetStdHandle
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetCurrentThreadId
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
HeapAlloc
GetCPInfo

Sections

.text
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 112KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 86KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

obxikr
Size: 290KB - Virtual size: 289KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

25fdf4d09f444ddb52db09ade98b008e

Headers

File Characteristics

Imports

user32

ole32

oleaut32

advapi32

kernel32

Sections

.text Size: 16KB - Virtual size: 16KB

.rdata Size: 112KB - Virtual size: 112KB

.data Size: 4KB - Virtual size: 86KB

obxikr Size: 290KB - Virtual size: 289KB

.rsrc Size: 6KB - Virtual size: 5KB

.reloc Size: 3KB - Virtual size: 2KB

.text
Size: 16KB - Virtual size: 16KB

.rdata
Size: 112KB - Virtual size: 112KB

.data
Size: 4KB - Virtual size: 86KB

obxikr
Size: 290KB - Virtual size: 289KB

.rsrc
Size: 6KB - Virtual size: 5KB

.reloc
Size: 3KB - Virtual size: 2KB