0b832ff18ea708b28c00d0d41206b80d_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

0b832ff18ea708b28c00d0d41206b80d_JaffaCakes118
Size

73KB
MD5

0b832ff18ea708b28c00d0d41206b80d
SHA1

6681b013f26e458ca56fd6618137ac88df866440
SHA256

334895df0a113a52fca2b6062782f92a8ca93b8641a428fe4b09ec8325a1122d
SHA512

d677c1d31e104f5489884ff515f116b60207c9e0dcead691e6d44eba7a4230115599d0427bc68326fb03a3fbaab7037802568516977ca5452bbcce890cdb7f47
SSDEEP

1536:CjHq9gZDnZux4wc5k+TgpqqYom0CsNdyukfPw:CjHqDtc5RUnYoSsNYFfPw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0b832ff18ea708b28c00d0d41206b80d_JaffaCakes118

Files

0b832ff18ea708b28c00d0d41206b80d_JaffaCakes118
.exe windows:5 windows x86 arch:x86

4a7c57b918de2a06dfd310f913cac2de

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

StrStrIW
StrCpyW
StrRStrIW
StrCatW

kernel32

CopyFileW
CloseHandle
WriteFile
CreateFileW
WideCharToMultiByte
CreateThread
GetCommandLineW
GetModuleHandleW
GetProcAddress
LoadLibraryW
TerminateThread
GetExitCodeThread
GetTickCount
FindClose
DeleteFileW
ReadFile
VirtualAlloc
GetFileSize
FindNextFileW
GetLastError
FindFirstFileW
ExpandEnvironmentStringsW
FreeLibrary
LoadLibraryExW
GetPrivateProfileStringW
MultiByteToWideChar
GetVersion
lstrlenW
OpenProcess
Process32FirstW
CreateToolhelp32Snapshot
SetSystemTime
GetSystemTime
LoadLibraryA
HeapReAlloc
VirtualFree
GetModuleFileNameA
GetStdHandle
CreateProcessW
WaitForSingleObject
Sleep
Process32NextW
InitializeCriticalSectionAndSpinCount
HeapAlloc
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
TlsGetValue
TlsSetValue
SetLastError
GetCurrentThreadId
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlUnwind
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
LeaveCriticalSection
EnterCriticalSection
HeapFree
ExitProcess
GetLocaleInfoA

user32

GetDlgItemInt
GetWindowLongW
SetWindowLongW
SetWindowPos
SetLayeredWindowAttributes
DefWindowProcW
RegisterClassExW
CallNextHookEx
CreateWindowExW
ShowWindow
UpdateWindow
SetForegroundWindow
SetWindowsHookExW
DialogBoxParamW
EndDialog
MessageBoxW
GetAsyncKeyState
EndPaint
BeginPaint
GetSystemMetrics

gdi32

CreatePen
CreateFontA
SelectObject
CreateSolidBrush
Rectangle
SetBkMode
SetTextColor
TextOutW

shell32

ShellExecuteW

Sections

.text
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 15KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4a7c57b918de2a06dfd310f913cac2de

Headers

DLL Characteristics

File Characteristics

Imports

shlwapi

kernel32

user32

gdi32

shell32

Sections

.text Size: 31KB - Virtual size: 30KB

.rdata Size: 8KB - Virtual size: 8KB

.data Size: 15KB - Virtual size: 17KB

.rsrc Size: 18KB - Virtual size: 17KB

.text
Size: 31KB - Virtual size: 30KB

.rdata
Size: 8KB - Virtual size: 8KB

.data
Size: 15KB - Virtual size: 17KB

.rsrc
Size: 18KB - Virtual size: 17KB