1bd36483e712d3d8b9b6f7326ad7659f_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

1bd36483e712d3d8b9b6f7326ad7659f_JaffaCakes118
Size

125KB
MD5

1bd36483e712d3d8b9b6f7326ad7659f
SHA1

ca3959064a97171e8fe9283288091e5e89be1d32
SHA256

80403313696b212c52c6623f4c0ed21d5361b8698e5177e0d58db539a293d150
SHA512

14f5f2fabab7cf27d88427b026c17d1d237edf6e37fdcf09f333e99ff7550739f8d138f5fcbb744549c043f06cb8192ff39317e5db25f0d372ac68487c55e184
SSDEEP

3072:tC+LNGXtpYubpPnUtV5vAaahA/L6xSfeipKnF9cQ0NHhe:8EGYubpPUtV5vAaIipFQrcQ0NHh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1bd36483e712d3d8b9b6f7326ad7659f_JaffaCakes118

Files

1bd36483e712d3d8b9b6f7326ad7659f_JaffaCakes118
.exe windows:9 windows x86 arch:x86

82c510a1fd62b98576dc977eaaadb9a9

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualQueryEx
WaitForMultipleObjects
SetThreadUILanguage
EnumSystemLanguageGroupsA
OpenThread
CreateFileMappingA
EnumLanguageGroupLocalesA
ExitThread
GetFileTime
GetSystemDefaultLangID
CreateFileA
GetModuleHandleA
GetQueuedCompletionStatus
RtlZeroMemory
ConnectNamedPipe
FreeEnvironmentStringsA
CreateIoCompletionPort
UnmapViewOfFile
MapViewOfFile
IsValidLocale
GetSystemDefaultLCID
FileTimeToSystemTime
SetFilePointer
GetLocaleInfoA
InterlockedExchangeAdd
GetSystemTimes
GetEnvironmentStringsA
PeekNamedPipe
CreateThread
CreateNamedPipeA
ConvertDefaultLocale
WaitForMultipleObjects
ReadFile
DisconnectNamedPipe

kbdlrddm

CallCPLEntry16
SdbReadStringTag
ImmSetStatusWindowPos
SdbGrabMatchingInfo
ShimFlushCache
DAD_DragEnterEx
SdbGetMsiPackageInformation
Control_RunDLLA
ExtractIconExA
ImmSystemHandler
ImmActivateLayout
ImmDestroyContext
ImmLockIMC
CheckEscapesA
ImmUnlockImeDpi
FindExeDlgProc
SdbReadBYTETagRef
ImmSetActiveContext
CtfImmDispatchDefImeMessage
SdbRegisterDatabase
ImmEnumInputContext
ImmGetStatusWindowPos
CDefFolderMenu_Create2
PickIconDlg
ImmGetHotKey
SdbGetTagFromTagID

user32

MapDialogRect
FrameRect
SetTimer
GetSysColor
UpdateWindow
DrawFocusRect
EndPaint
GetCapture
ReleaseCapture
MsgWaitForMultipleObjects
GetDesktopWindow

gdi32

StretchBlt
CreateSolidBrush
SetStretchBltMode
BitBlt

Sections

.text
Size: 109KB - Virtual size: 112KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

82c510a1fd62b98576dc977eaaadb9a9

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

kbdlrddm

user32

gdi32

Sections

.text Size: 109KB - Virtual size: 112KB

.rdata Size: 2KB - Virtual size: 4KB

.data Size: 9KB - Virtual size: 12KB

.rsrc Size: 3KB - Virtual size: 4KB

.text
Size: 109KB - Virtual size: 112KB

.rdata
Size: 2KB - Virtual size: 4KB

.data
Size: 9KB - Virtual size: 12KB

.rsrc
Size: 3KB - Virtual size: 4KB