381f400d7e8cef92a18acdbc57721bfe_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

381f400d7e8cef92a18acdbc57721bfe_JaffaCakes118
Size

119KB
MD5

381f400d7e8cef92a18acdbc57721bfe
SHA1

49b6e5be8d20333451f15f11d5e463d11251161c
SHA256

4690f41ff0182c8f54e0820231507b5b2ca4536b2575c2d4c543ec82c37d1a4c
SHA512

71dfd6264fea3608aaddea92dedd432faecd9a38a82a02327322546d078f70b2c47bcc624cdadff967243e3e99ca75bd9c7bf3fb16bedc9318179c39d36d675d
SSDEEP

3072:t6/Pdl/7hKkXq5WwnG1LwWmq6MG2Xzs1Exaxb2:Q/lZ4Sq5Wh1LwWmq65QkUa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
381f400d7e8cef92a18acdbc57721bfe_JaffaCakes118

Files

381f400d7e8cef92a18acdbc57721bfe_JaffaCakes118
.exe windows:4 windows x86 arch:x86

187c70f0d762b1276768c11331173463

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_WDM_DRIVER

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualFree
VirtualProtect
GetWindowsDirectoryA
_lclose
FreeLibrary
HeapAlloc
ExitThread
FindFirstFileW
GetLastError
GetStringTypeW
WriteConsoleW
CallNamedPipeW
OutputDebugStringA
GetCurrentProcess
CallNamedPipeA
GetProcAddress
GetModuleHandleA
CreateHardLinkA
VirtualAlloc
LoadLibraryW
DeleteAtom
lstrlenA

msvcrt

_exit
_iob
_except_handler3
strncpy
_wtol
swprintf
wcscat
_purecall
_controlfp
_vsnprintf
_snwprintf
isalpha
wcscpy
isdigit
__initenv
__CxxFrameHandler
wcscmp
_ftol
_c_exit
__dllonexit
_wcmdln
malloc
swscanf
wcschr
__p__fmode
_adjust_fdiv
free
__winitenv
memcpy
_cexit
__p__commode
wcslen

user32

GetProcessWindowStation
ReleaseDC
LoadImageW
GetCursorPos
MapWindowPoints
CopyRect
SetCapture
DispatchMessageW
LoadCursorW
DestroyWindow
SetScrollPos
DialogBoxParamA
RegisterClassA
GetParent
LoadCursorA
wsprintfW
SendMessageA
ClientToScreen
LoadMenuW
ReleaseCapture
CheckDlgButton
BeginPaint
ScreenToClient
IsWindow
SendMessageW
GetMenuItemCount
UnregisterClassW

shell32

SHGetFolderPathW
SHGetFileInfoW
SHGetPathFromIDListW
ShellExecuteW

opengl32

wglShareLists
glColor4i
glTexCoord2d
GlmfBeginGlsBlock
glColor4f
glColor3ui
glColor4d
glStencilMask
glFogfv
glTexCoord2dv

Exports

Exports

KmmbTobyhhTytqsGf
BxsUoytkpPsl
TanudMqnek

Sections

.text
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 512B - Virtual size: 124B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 102B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

187c70f0d762b1276768c11331173463

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

msvcrt

user32

shell32

opengl32

Exports

Exports

Sections

.text Size: 15KB - Virtual size: 15KB

.rdata Size: 2KB - Virtual size: 2KB

.edata Size: 512B - Virtual size: 124B

.data Size: 68KB - Virtual size: 67KB

.rsrc Size: 31KB - Virtual size: 31KB

.reloc Size: 512B - Virtual size: 102B

.text
Size: 15KB - Virtual size: 15KB

.rdata
Size: 2KB - Virtual size: 2KB

.edata
Size: 512B - Virtual size: 124B

.data
Size: 68KB - Virtual size: 67KB

.rsrc
Size: 31KB - Virtual size: 31KB

.reloc
Size: 512B - Virtual size: 102B