23124e39cb148297ad6138baaaa6e1ec_JaffaCakes118

General

Target

23124e39cb148297ad6138baaaa6e1ec_JaffaCakes118
Size

97KB
MD5

23124e39cb148297ad6138baaaa6e1ec
SHA1

756d5b4ac436e1eba7408efbec30f8d6e7afd68c
SHA256

88f76fd8588bbb9049d95b340cd43c5b5451549af26a3a1c131c11516f6c3f63
SHA512

2c3a24db2053dad2a161ba6573419363074186f649f5bda16075b53fd6878d99b14dafc11b6a1f55081c10bf91cf3e7ed09a8756b1d7a97ca956b49f3f7e26a1
SSDEEP

3072:N6nXu4hFReDlacf6op5lZQyvtpTMrm/zH:Yne4nRe5acf6oPrTMrm/r

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
23124e39cb148297ad6138baaaa6e1ec_JaffaCakes118

Files

23124e39cb148297ad6138baaaa6e1ec_JaffaCakes118
.exe windows:5 windows x86 arch:x86

e0095f42960c730e0ab6c3d40755fb42

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalUnlock
WriteFile
CreateFileW
GlobalLock
GlobalAlloc
GetCurrentProcessId
GlobalFree
ExitProcess
GetProcAddress
GetModuleHandleA
VirtualAlloc
GetModuleHandleW
CloseHandle
GetCurrentThread
GetVersionExA
GetCurrentThreadId
GetModuleFileNameA
GetSystemTime
GetStdHandle
TlsAlloc
GetCurrentProcess
GetCurrentDirectoryA
GetLocalTime
CreateEventA
CreateMutexA
GetStartupInfoW

user32

GetSystemMetrics
GetForegroundWindow
ReleaseDC
GetClientRect
MessageBoxW
GetDC
GetActiveWindow

gdi32

DeleteObject
BitBlt
GetObjectA
GetDIBits
CreateEnhMetaFileA
CreateCompatibleBitmap
StretchBlt
SetStretchBltMode
GetObjectType
GetDeviceCaps
CreateCompatibleDC
SelectObject

shlwapi

ChrCmpIW

msvcrt

_onexit
__dllonexit
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_exit
_XcptFilter
exit
_wcmdln
__wgetmainargs
_initterm
__setusermatherr
_adjust_fdiv

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 95KB - Virtual size: 169KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 544B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 978B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e0095f42960c730e0ab6c3d40755fb42

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

shlwapi

msvcrt

Sections

.text Size: 13KB - Virtual size: 13KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 95KB - Virtual size: 169KB

.rsrc Size: 1024B - Virtual size: 544B

.reloc Size: 1024B - Virtual size: 978B

.text
Size: 13KB - Virtual size: 13KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 95KB - Virtual size: 169KB

.rsrc
Size: 1024B - Virtual size: 544B

.reloc
Size: 1024B - Virtual size: 978B