0e6dbb1d80ebc2264b9ccb6fa75e234c_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

0e6dbb1d80ebc2264b9ccb6fa75e234c_JaffaCakes118
Size

94KB
MD5

0e6dbb1d80ebc2264b9ccb6fa75e234c
SHA1

8a2f3cf4f8abe3e66f2790f09cb3ffe994a930f0
SHA256

932ef2684e2bccd894e64ec4b946639435b2910e5e6ed9e9f8d267684d948d7a
SHA512

2179826b3ba2653ba64c872c17a6eb20b62bc0d2bca9388df14ac94b70f1a14fe10631ddbf2eb90d22d9af638678fc4545fc3d54833e5f1420917035dabf18b8
SSDEEP

1536:VovOF+0hBn+rF0FocLDFWBGsLcBwjTA1NvfPdzHUOLTOgpGdcw9QxNpqEb:qC7+rFQBWB4BwKNvXdlTOxdn9WNpl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0e6dbb1d80ebc2264b9ccb6fa75e234c_JaffaCakes118

Files

0e6dbb1d80ebc2264b9ccb6fa75e234c_JaffaCakes118
.dll windows:4 windows x86 arch:x86

b16027cf21aa9428b19af707ba8954f8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetLastError
CloseHandle
CreateFileW
ReadFile
QueryPerformanceCounter
DeleteFileW
WriteConsoleW
GetFileType
GetStdHandle
WriteFile
ReleaseMutex
FormatMessageW
CreateMutexW
SetProcessShutdownParameters
LocalFree
SetUnhandledExceptionFilter
InterlockedCompareExchange
Sleep
InterlockedExchange
GetSystemTime
GetModuleHandleW
CreateDirectoryW
GetVersion
GetCommandLineA
GetTickCount
GetFileSize
VirtualProtect

user32

GetParent
GetGUIThreadInfo
MonitorFromRect
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
UpdateWindow
DefWindowProcW
RegisterClassW
SetCursor
SetWindowLongW
GetClientRect
EndPaint
BeginPaint
PostQuitMessage
GetMessagePos
CreateWindowExW
RealGetWindowClassW
SetWinEventHook
SendDlgItemMessageW
MapWindowPoints
RegisterHotKey
GetForegroundWindow
GetWindowThreadProcessId
UpdateLayeredWindow
GetMessageW
IsDialogMessageW
TranslateMessage
DispatchMessageW
SendMessageW
EnumDisplayMonitors
SetWindowPos
LoadCursorW
DestroyWindow
IsWindow
UnionRect
InflateRect
SetRect
ShowWindow
SetTimer
SetWindowRgn
SendInput
CloseDesktop
GetUserObjectInformationW
KillTimer
LoadStringW
SetWindowPlacement
FindWindowW
PostMessageW
GetThreadDesktop
MonitorFromPoint
GetMonitorInfoW
GetWindowRect
CopyRect
OffsetRect
EqualRect
PtInRect
IsRectEmpty
GetSystemMetrics
GetWindowLongW
SetForegroundWindow
SetWindowsHookExW
SystemParametersInfoW
UnhookWindowsHookEx
GetAsyncKeyState
InvalidateRect

advapi32

RegDeleteValueW
RegQueryValueExW
RegCreateKeyExW
RegSetValueExW
RegCloseKey
RegOpenKeyExW

gdi32

CreateRectRgn
CombineRgn
DeleteDC
DeleteObject

ole32

CoInitialize
CoUninitialize
CoCreateInstance
CoInitializeEx

msvcrt

_onexit
_amsg_exit
_initterm
_wcsicmp
_vsnwprintf
memset
_except_handler3
__CxxFrameHandler
__dllonexit
exit
_unlock
memcpy
wcstok
_controlfp
_wcmdln
_cexit
free
malloc
_adjust_fdiv
_lock

Sections

.text
Size: 49KB - Virtual size: 49KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 34KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b16027cf21aa9428b19af707ba8954f8

Headers

File Characteristics

Imports

kernel32

user32

advapi32

gdi32

ole32

msvcrt

Sections

.text Size: 49KB - Virtual size: 49KB

.rdata Size: 3KB - Virtual size: 3KB

.data Size: 34KB - Virtual size: 67KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 4KB - Virtual size: 4KB

.text
Size: 49KB - Virtual size: 49KB

.rdata
Size: 3KB - Virtual size: 3KB

.data
Size: 34KB - Virtual size: 67KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 4KB - Virtual size: 4KB