0cf775d861614cc6615c5160902cf605_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

0cf775d861614cc6615c5160902cf605_JaffaCakes118
Size

43KB
MD5

0cf775d861614cc6615c5160902cf605
SHA1

ca69c0d308e034e18f59f373e04879f2d34cf7a0
SHA256

d01ea921c6d05fe9c2097e43be7d75fe688e0c36f6010f004ec7fb8a51350bcf
SHA512

01db975336648b423670eb8fbcd0d0175bc8f78678bdd6898315dcd772502b185002275eb04e822c21f85c439956d336612a5613233e1cc71a352802689c0b8c
SSDEEP

768:9VhR7p2/tTVZQ+IdLwje4HfRKrkur6IANJb795TQzM:ffQ9Id0hKrk8i35TE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0cf775d861614cc6615c5160902cf605_JaffaCakes118

Files

0cf775d861614cc6615c5160902cf605_JaffaCakes118
.exe windows:5 windows x86 arch:x86

c4acbc595103ab273c5ffbab1d1dcafb

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

CreateFontA

user32

GetDlgItem
LoadIconA
EndDialog
SetDlgItemInt
SetDlgItemTextA
SendMessageA
DialogBoxParamA

kernel32

Sleep
GetCurrentProcess
ReleaseMutex
CloseHandle
TerminateThread
CreateThread
CreateMutexA
WaitForSingleObject
GetStringTypeW
GetStringTypeA
GetCommandLineA
GetStartupInfoA
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetModuleHandleW
GetProcAddress
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapCreate
VirtualFree
HeapFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
HeapAlloc
RaiseException
LeaveCriticalSection
EnterCriticalSection
LoadLibraryA
InitializeCriticalSectionAndSpinCount
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
VirtualAlloc
HeapReAlloc
RtlUnwind
HeapSize
GetLocaleInfoA
LCMapStringA
MultiByteToWideChar
LCMapStringW

advapi32

CryptReleaseContext
CryptAcquireContextA
CryptGenRandom

psapi

GetProcessMemoryInfo

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 968B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c4acbc595103ab273c5ffbab1d1dcafb

Headers

DLL Characteristics

File Characteristics

Imports

gdi32

user32

kernel32

advapi32

psapi

Sections

.text Size: 28KB - Virtual size: 27KB

.rdata Size: 10KB - Virtual size: 9KB

.data Size: 3KB - Virtual size: 6KB

.rsrc Size: 1024B - Virtual size: 968B

.text
Size: 28KB - Virtual size: 27KB

.rdata
Size: 10KB - Virtual size: 9KB

.data
Size: 3KB - Virtual size: 6KB

.rsrc
Size: 1024B - Virtual size: 968B