f4fa5ae5c9cfdb96cdeca2fa44e4836b_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

f4fa5ae5c9cfdb96cdeca2fa44e4836b_JaffaCakes118
Size

807KB
MD5

f4fa5ae5c9cfdb96cdeca2fa44e4836b
SHA1

8ca27f225e9da84ff4f370fc732a193e8dbaed8a
SHA256

75eba3ae0436e2a7caafc70dca4c0b314cfaecb23510cf4fc5b9c85d6623d2fc
SHA512

450766cfbd9c8b1b937059891d414fe10645edf493d128c9ea8d5464ef7f68e6ce617a3d6fbdc87d71c66faaad3d408d0a754f1f48bd3900fd98a5ef85d4b3f6
SSDEEP

12288:YFeYfrGEYZf3BtIkiAm7bZyo2u44ERohOAcnLfS/XoBPgxC:ueCGEcLOjdEuI3nLJBPj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f4fa5ae5c9cfdb96cdeca2fa44e4836b_JaffaCakes118

Files

f4fa5ae5c9cfdb96cdeca2fa44e4836b_JaffaCakes118
.exe windows:5 windows x86 arch:x86

92adcfa701fc916e0577451ecc99f3ce

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualProtect
GetTickCount
GetModuleHandleW
GetModuleFileNameA
GetCurrentProcessId
GetVersionExA
lstrlenA
LoadLibraryW
lstrlenA
GetModuleFileNameA
GetSystemTimeAsFileTime
CreateFileW
GetCurrentThreadId
LocalAlloc
HeapFree
Sleep
GetCurrentProcess
CreateFileW
CreateEventW
CreateFileW
UnhandledExceptionFilter
lstrcmpiW
CloseHandle
lstrcmpiW
FreeLibrary
DeleteCriticalSection
Sleep
Sleep
CreateEventW
GetProcAddress
LoadLibraryW
DeleteCriticalSection
LeaveCriticalSection
Sleep
SetLastError
HeapFree
GetSystemTimeAsFileTime
VirtualAlloc
GetCurrentProcessId
InterlockedExchange
InitializeCriticalSection
DisableThreadLibraryCalls
QueryPerformanceCounter
GetCurrentProcess
DisableThreadLibraryCalls
HeapDestroy
HeapDestroy
GetCurrentProcess
GetProcessHeap
CreateEventW
DeleteCriticalSection
GetModuleHandleA
QueryPerformanceCounter
InterlockedCompareExchange
LeaveCriticalSection
CloseHandle
InterlockedIncrement
GetModuleHandleW
CreateThread
FreeLibrary
InterlockedCompareExchange
DisableThreadLibraryCalls
GetModuleFileNameA
SetLastError
VirtualAlloc
DeleteCriticalSection
MultiByteToWideChar
HeapDestroy
GetCurrentThreadId
GetCurrentProcessId
HeapFree
Sleep
GetTickCount
GetProcAddress
GetLastError
EnterCriticalSection
lstrlenA
GetModuleHandleA
InterlockedDecrement
LeaveCriticalSection
HeapAlloc
GetModuleHandleA
EnterCriticalSection
GetVersionExA
HeapAlloc
VirtualProtect
QueryPerformanceCounter
InterlockedIncrement
InterlockedCompareExchange
FreeLibrary
GetSystemTimeAsFileTime
GetModuleFileNameW
EnterCriticalSection
LocalAlloc
UnhandledExceptionFilter
CreateThread
HeapFree
SetLastError
InterlockedExchange
DeleteCriticalSection
CreateEventW
GetModuleHandleA
GetVersionExA
VirtualProtect
CreateThread

user32

TranslateMessage
KillTimer
GetFocus
DefWindowProcW
SetDlgItemTextW
SendMessageW
PeekMessageW
DispatchMessageW
SetTimer
EndPaint
LoadIconW
CharNextW
GetDesktopWindow
SetDlgItemTextW
KillTimer
wsprintfA
SetTimer
wsprintfA
SetWindowLongW
LoadIconW
KillTimer
InvalidateRect
BeginPaint
SetFocus
IsWindow
SetCursor
SendDlgItemMessageW
GetClientRect
CharNextW
LoadIconW
TranslateMessage
SetWindowTextW
DefWindowProcW
GetSystemMetrics
DefWindowProcW
SetFocus
PostMessageW
MessageBoxW
EnableWindow
LoadStringW
GetSystemMetrics
GetClientRect
IsWindow
ReleaseDC
DefWindowProcW
SendDlgItemMessageW
CharNextW
DispatchMessageW
PostQuitMessage
wsprintfA
SetForegroundWindow
SetWindowTextW
TranslateMessage
SendMessageW
EndDialog
DialogBoxParamW
SendMessageW
SetFocus
DestroyWindow
ShowWindow
GetClientRect
TranslateMessage
GetFocus
GetDlgItem
GetFocus
GetWindowLongW
DispatchMessageW
GetDlgItem
GetFocus
MessageBoxW
EnableWindow
PostMessageW
SetCursor
SetWindowTextW
PostMessageW
DestroyWindow
ReleaseDC
GetParent
SetForegroundWindow
EndPaint
LoadIconW
SetWindowTextW
EndPaint
GetClientRect
GetClientRect
GetSysColor
GetSystemMetrics
EndDialog
LoadCursorW
GetClientRect
GetDC
PeekMessageW
PostMessageW
CharNextW
GetDC
IsDlgButtonChecked
GetDC
SendDlgItemMessageW
GetSystemMetrics
GetDesktopWindow

Sections

.text
Size: 718KB - Virtual size: 968KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 82KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

92adcfa701fc916e0577451ecc99f3ce

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

Sections

.text Size: 718KB - Virtual size: 968KB

.data Size: - Virtual size: 4KB

.rdata Size: 5KB - Virtual size: 8KB

.rsrc Size: 82KB - Virtual size: 84KB

.text
Size: 718KB - Virtual size: 968KB

.data
Size: - Virtual size: 4KB

.rdata
Size: 5KB - Virtual size: 8KB

.rsrc
Size: 82KB - Virtual size: 84KB