22c6d9b17ed6e3ca5980e296f8f38775_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

22c6d9b17ed6e3ca5980e296f8f38775_JaffaCakes118
Size

351KB
MD5

22c6d9b17ed6e3ca5980e296f8f38775
SHA1

acbd94b93cb2f3bb013ea34de359a68f0ee8f1a6
SHA256

d2d41ec679f92adb5bc01dc15b0f2be30294ade91953c02c4d47ffdf14ae0a1f
SHA512

c0d3857efac00c88ae56ac33109747d8b7236e27ce752069ec06231f5006c0cfcdb94f6cff57508bec1146f8ae20f4472217ac0ed45ff425ed15b94976e7ad56
SSDEEP

6144:USjRuAkwLfCM/pmAo51LlDRIFZK1MIRnZjqNvTNbI+cPjjO3vGKTCMNy:xOwLfCMBY1MwFIc+IjjOfR1Q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
22c6d9b17ed6e3ca5980e296f8f38775_JaffaCakes118

Files

22c6d9b17ed6e3ca5980e296f8f38775_JaffaCakes118
.exe windows:4 windows x86 arch:x86

334b23f48db5ecbbe5498ddcb1e0e8aa

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

GdiPlayJournal
PolyPolyline
CreateMetaFileA
SaveDC
GdiSetBatchLimit
SetViewportExtEx

kernel32

TerminateProcess
GetModuleFileNameW
InterlockedIncrement
ExitProcess
GlobalGetAtomNameA
GetCurrentThreadId
InitializeCriticalSection
GetVersion
HeapDestroy
GetTimeZoneInformation
GetCurrentProcess
MultiByteToWideChar
LCMapStringA
HeapCreate
WideCharToMultiByte
GetCurrentProcessId
SetHandleCount
GetCommandLineA
GetModuleFileNameA
SetEnvironmentVariableA
ReadFile
GetStartupInfoA
FreeEnvironmentStringsW
VirtualQuery
SetStdHandle
InterlockedCompareExchange
GetProcAddress
LoadLibraryA
CompareStringA
LeaveCriticalSection
WriteFile
CloseHandle
VirtualAlloc
InterlockedExchange
GetCommandLineW
SetLastError
GetTickCount
GetLastError
GetSystemTime
TlsSetValue
EnterCriticalSection
GetEnvironmentStrings
DuplicateHandle
HeapReAlloc
GetStartupInfoW
UnhandledExceptionFilter
GetEnvironmentStringsW
GetFileType
OpenMutexA
QueryPerformanceCounter
GetStdHandle
RtlUnwind
SetFilePointer
GetSystemTimeAsFileTime
LCMapStringW
GetStringTypeA
TlsFree
GetModuleHandleA
GetCPInfo
VirtualFree
TlsAlloc
IsBadWritePtr
GetStringTypeW
GetTempPathA
FlushFileBuffers
TlsGetValue
GetCurrentThread
HeapFree
CreateMutexA
InterlockedDecrement
HeapAlloc
DeleteCriticalSection
CompareStringW
GetLocalTime
FreeEnvironmentStringsA

shell32

SHGetFileInfo

comctl32

InitCommonControlsEx

user32

SystemParametersInfoA
RegisterClassExA
FrameRect
DdeCreateStringHandleW
CharUpperW
FindWindowExA
SetMenuItemBitmaps
GetUserObjectSecurity
RegisterClassA
GetMenuItemRect

Sections

.text
Size: 136KB - Virtual size: 136KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 205KB - Virtual size: 205KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

334b23f48db5ecbbe5498ddcb1e0e8aa

Headers

File Characteristics

Imports

gdi32

kernel32

shell32

comctl32

user32

Sections

.text Size: 136KB - Virtual size: 136KB

.rdata Size: 4KB - Virtual size: 13KB

.data Size: 205KB - Virtual size: 205KB

.rsrc Size: 4KB - Virtual size: 3KB

.text
Size: 136KB - Virtual size: 136KB

.rdata
Size: 4KB - Virtual size: 13KB

.data
Size: 205KB - Virtual size: 205KB

.rsrc
Size: 4KB - Virtual size: 3KB