2e3fb8b38e59480ed8f47449a46e2082_JaffaCakes118

General

Target

2e3fb8b38e59480ed8f47449a46e2082_JaffaCakes118
Size

546KB
MD5

2e3fb8b38e59480ed8f47449a46e2082
SHA1

82305053ceab8a3afeb81af4a0898ee518a53b42
SHA256

a5b518463570c96292ef3f4eacd9009a205f82bb3cdbb8c54fa2beb1ad122d22
SHA512

bfb90967eda23f63ddb2816b16cb4b8eb7723156d99bd78f40e09cb692ad700c9461f96996ca479121ae5981eb6fe5108ff4c718cae6f1c82f11434f99cb2525
SSDEEP

6144:ET04lwweWTgZ7iNZiGwodzu/qrVYgtd2G8ceTJiNC8jh1M0gPiYLL9biBrOqGfn:ozE9Z2NIQNpVdBeToNC8jhy2S9uBuP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
2e3fb8b38e59480ed8f47449a46e2082_JaffaCakes118

Files

2e3fb8b38e59480ed8f47449a46e2082_JaffaCakes118
.exe windows:5 windows x86 arch:x86

447325efa67d8a48c7625003be05be76

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

AdjustWindowRect
EndDialog
InvalidateRect
wsprintfA
SetWindowTextA
DrawMenuBar
BeginPaint
EndPaint
IsIconic
MoveWindow
PostQuitMessage
GetWindowLongA
DialogBoxParamA
DefWindowProcA
EnableMenuItem
GetWindowRect

kernel32

GetStdHandle
HeapSize
RtlUnwind
HeapReAlloc
VirtualAlloc
InitializeCriticalSectionAndSpinCount
LoadLibraryA
GetProcAddress
HeapAlloc
GetProcessHeap
GetCommandLineA
GetStartupInfoA
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
GetLastError
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetModuleHandleA
Sleep
ExitProcess
WriteFile
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
HeapCreate
VirtualFree
HeapFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
LeaveCriticalSection
EnterCriticalSection
GetLocaleInfoA

Sections

.text
Size: 72KB - Virtual size: 71KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 439KB - Virtual size: 439KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 174KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

447325efa67d8a48c7625003be05be76

Headers

DLL Characteristics

File Characteristics

Imports

user32

kernel32

Sections

.text Size: 72KB - Virtual size: 71KB

.rdata Size: 439KB - Virtual size: 439KB

.data Size: 4KB - Virtual size: 174KB

.rsrc Size: 30KB - Virtual size: 29KB

.text
Size: 72KB - Virtual size: 71KB

.rdata
Size: 439KB - Virtual size: 439KB

.data
Size: 4KB - Virtual size: 174KB

.rsrc
Size: 30KB - Virtual size: 29KB