ae1ead37bf556e42dfb0b87fb441d56a_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

ae1ead37bf556e42dfb0b87fb441d56a_JaffaCakes118
Size

129KB
MD5

ae1ead37bf556e42dfb0b87fb441d56a
SHA1

3ac3e5026e65379ccccd9dd90f774a3281926828
SHA256

48f95545cf50fcd0eed8c23663ce0a2526848c90309fda3771f16377376d83c4
SHA512

86a9cca1e57f9d863e7478e3192a25886eeb046398fbaa683f950e87baf674f001cf12821ef100ad33e1d05eb77b3fc075d456ec40b8119d76524596322f6353
SSDEEP

1536:HyuIMERWSXKkV7s0wOJ2CzKP3/QCPcarferE+Y8B/gYoTI2TnDQOqn6XgPCZ9v99:SLR11wazGwvyfQrIHrxgLxKJ+U

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ae1ead37bf556e42dfb0b87fb441d56a_JaffaCakes118

Files

ae1ead37bf556e42dfb0b87fb441d56a_JaffaCakes118
.exe windows:5 windows x86 arch:x86

5efc553205948c39d2e96f3cbd1b13ef

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

BringWindowToTop
EndDialog
CreateDialogIndirectParamW
UnregisterClassA
EqualRect
SetWindowPos
IsWindowVisible
ValidateRect
DefWindowProcW
DestroyWindow
DispatchMessageW
TranslateMessage
GetMessageW
PostMessageW
PeekMessageW
GrayStringW
DrawTextExW
TabbedTextOutW
PostQuitMessage
GetWindow
SetWindowContextHelpId
MapDialogRect
GetWindowThreadProcessId
GetLastActivePopup
IsWindowEnabled
GetMenuState
GetMenuItemID
GetMenuItemCount
GetSubMenu
ExitWindowsEx
LoadBitmapW
LoadCursorW
LoadIconW
RegisterClassExW
CreateWindowExW
GetDC
GetParent
SetWindowLongW
GetWindowLongW
SetWindowTextW
EnableWindow
ShowWindow
SendMessageW

shell32

SHGetPathFromIDListW
DragFinish

comctl32

InitCommonControlsEx

kernel32

GetEnvironmentStrings
FreeEnvironmentStringsA
GetModuleFileNameA
WriteFile
ExitProcess
WideCharToMultiByte
Sleep
GetLastError
GetCurrentThreadId
SetLastError
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetProcAddress
GetOEMCP
GetACP
InterlockedDecrement
InterlockedIncrement
GetCPInfo
DeleteCriticalSection
FreeEnvironmentStringsW
GetStdHandle
SetHandleCount
LeaveCriticalSection
EnterCriticalSection
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetStartupInfoA
GetProcessHeap
HeapAlloc
GetVersionExA
HeapFree
GetCommandLineA
GetTimeZoneInformation
GetDateFormatA
GetTimeFormatA
GetSystemTimeAsFileTime
GetModuleHandleA
LocalAlloc
GetSystemDEPPolicy
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
RaiseException
SetFilePointer
GetConsoleCP
GetConsoleMode
InitializeCriticalSection
RtlUnwind
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
VirtualAlloc
HeapReAlloc
LoadLibraryA
FlushFileBuffers
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
HeapSize
CloseHandle
CreateFileA
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetFileType

Sections

.text
Size: 69KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 54KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5efc553205948c39d2e96f3cbd1b13ef

Headers

DLL Characteristics

File Characteristics

Imports

user32

shell32

comctl32

kernel32

Sections

.text Size: 69KB - Virtual size: 68KB

.rdata Size: 54KB - Virtual size: 53KB

.data Size: 5KB - Virtual size: 32KB

.rsrc Size: 512B - Virtual size: 436B

.text
Size: 69KB - Virtual size: 68KB

.rdata
Size: 54KB - Virtual size: 53KB

.data
Size: 5KB - Virtual size: 32KB

.rsrc
Size: 512B - Virtual size: 436B