192a7f0d2dd5849aec037d9bb4cf2840_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

192a7f0d2dd5849aec037d9bb4cf2840_JaffaCakes118
Size

46KB
MD5

192a7f0d2dd5849aec037d9bb4cf2840
SHA1

9d5aee69b56736f836da9eda4d9cb3669314a21f
SHA256

e7cd4a9dbaec08abf5979ba9343237970fe9e695901077a3113fdba18927e09d
SHA512

31a1b93e0b1f9ae58ca5fd4b78283cff9c83be6bd8137573443fadfaa237560d223259f90793f96065701257256c058c1e84a5745714bd4654b718e832ff3424
SSDEEP

768:VQMVu1uM2TXpjb7/KGCR4KyUp+r3sKQoj3diOdiaY+:VH9M2T5jbLpCGOpYcKQcplY+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
192a7f0d2dd5849aec037d9bb4cf2840_JaffaCakes118

Files

192a7f0d2dd5849aec037d9bb4cf2840_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e4c264b9748c8d6a90e66bef97f46d75

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalLock
CreateHardLinkW
GetDevicePowerState
RegisterConsoleVDM
FindVolumeClose
ReadConsoleOutputCharacterA
Thread32First
SetVolumeMountPointA
WriteConsoleInputA
VirtualProtect
HeapCreate
WritePrivateProfileSectionA
PeekNamedPipe
GetModuleFileNameW
DeleteVolumeMountPointA
CreateTimerQueueTimer
TlsAlloc
GetProcAddress
SetPriorityClass
FreeConsole
GetSystemTimeAdjustment
GetWriteWatch
GetStringTypeExW
LocalLock
SetProcessShutdownParameters
GetLastError
SetConsoleLocalEUDC
HeapLock
GetModuleHandleW
GetCommMask
LocalFree

user32

DestroyWindow
UnhookWindowsHookEx
FreeDDElParam
SetActiveWindow
DrawFrameControl
IsWindow
GetMonitorInfoW
TileWindows
GetDlgItemTextW
ChangeDisplaySettingsExA
OffsetRect
GetCaretPos
SystemParametersInfoW
SetMessageQueue
CheckMenuRadioItem
DrawCaption
CharToOemBuffW
LoadKeyboardLayoutW
GetClassLongA
UserHandleGrantAccess

gdi32

PathToRegion
GetNearestPaletteIndex
GetICMProfileA
EngCreateBitmap
GetTransform
GetCharWidthA
FONTOBJ_vGetInfo
GetRandomRgn
GetClipRgn
GetEnhMetaFileA
DeviceCapabilitiesExW
FONTOBJ_pifi
GetMetaFileA
GetWorldTransform
XFORMOBJ_iGetXform
GetBitmapDimensionEx
PolyPolyline
ScaleViewportExtEx
EnumEnhMetaFile
EngCreateDeviceSurface
GdiSetServerAttr
SetBrushOrgEx
PolyDraw
SetVirtualResolution
EndPage
FONTOBJ_cGetGlyphs
PlayEnhMetaFileRecord
GdiGetDC
CLIPOBJ_ppoGetPath
GdiGetBatchLimit

comdlg32

GetOpenFileNameA
ChooseColorW
ChooseFontW
ReplaceTextW
dwOKSubclass
GetSaveFileNameA
PrintDlgExA
GetFileTitleA
PageSetupDlgW
WantArrows

Sections

.text
Size: 4KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 38KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

e4c264b9748c8d6a90e66bef97f46d75

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

Sections

.text Size: 4KB - Virtual size: 40KB

.data Size: 38KB - Virtual size: 40KB

.idata Size: 3KB - Virtual size: 4KB

.text
Size: 4KB - Virtual size: 40KB

.data
Size: 38KB - Virtual size: 40KB

.idata
Size: 3KB - Virtual size: 4KB