1291fbbe63add5965413deae7b49879a_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

1291fbbe63add5965413deae7b49879a_JaffaCakes118
Size

628KB
MD5

1291fbbe63add5965413deae7b49879a
SHA1

24625b54a61be04f69074b59f930b488d5bcb601
SHA256

276309802948c53a9993b18501b53074a225d514ad5dbb46bd7524417c92c741
SHA512

c6870530a4e1618cbd986ec9e434f2c8148196d928dcee2e0475ff13d66fa10313348b9f48d5c5292bc8a56b3625cea0057d73a59ae65aeda895477147c60642
SSDEEP

12288:03fm3s/xzRetF+RnEZDixio1jv7RfCgSf5HJl2Tx2MRc:03ws/x9e91oD1o95HJl6oMRc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1291fbbe63add5965413deae7b49879a_JaffaCakes118

Files

1291fbbe63add5965413deae7b49879a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

56d4938ce5d569de10f113a15064abbc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetWindowLongA
SetWindowLongA
SetWindowPos
GetDesktopWindow
GetWindowRect
IsDialogMessageA
ShowWindow
CreateDialogParamA
PeekMessageA
DispatchMessageA
TranslateMessage
GetDlgItem
SendMessageA
EnableWindow
SetFocus
GetClientRect
ClientToScreen
SetWindowTextA
DefWindowProcA
CallWindowProcA
IsWindowEnabled
MessageBoxA
WaitForInputIdle
GetDC
LoadImageA
DestroyWindow

gdi32

CreateCompatibleDC
GetObjectA
SelectObject
StretchBlt
DeleteDC
DeleteObject

comctl32

InitCommonControlsEx

kernel32

GetPrivateProfileIntA
GetPrivateProfileStringA
LocalFree
FormatMessageA
GetLastError
WaitForSingleObject
CreateProcessA
WritePrivateProfileStringA
RtlUnwind
GetCommandLineA
GetVersionExA
HeapAlloc
GetProcessHeap
GetStartupInfoA
GetDriveTypeA
GetFullPathNameA
HeapDestroy
HeapCreate
VirtualFree
DeleteCriticalSection
LeaveCriticalSection
HeapFree
VirtualAlloc
HeapReAlloc
GetProcAddress
GetModuleHandleA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
Sleep
HeapSize
EnterCriticalSection
GetACP
GetOEMCP
CloseHandle
GetCurrentDirectoryA
SetFilePointer
GetConsoleCP
GetConsoleMode
InitializeCriticalSection
RaiseException
LoadLibraryA
MultiByteToWideChar
GetLocaleInfoA
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
SetStdHandle
FlushFileBuffers
CreateFileA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetCPInfo

Sections

.text
Size: 64KB - Virtual size: 62KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 536KB - Virtual size: 533KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

56d4938ce5d569de10f113a15064abbc

Headers

File Characteristics

Imports

user32

gdi32

comctl32

kernel32

Sections

.text Size: 64KB - Virtual size: 62KB

.rdata Size: 16KB - Virtual size: 13KB

.data Size: 8KB - Virtual size: 12KB

.rsrc Size: 536KB - Virtual size: 533KB

.text
Size: 64KB - Virtual size: 62KB

.rdata
Size: 16KB - Virtual size: 13KB

.data
Size: 8KB - Virtual size: 12KB

.rsrc
Size: 536KB - Virtual size: 533KB