3a87a61c1d7de268aeb18083a3199388_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

3a87a61c1d7de268aeb18083a3199388_JaffaCakes118
Size

261KB
MD5

3a87a61c1d7de268aeb18083a3199388
SHA1

36d473e9458326f74783da5273ab098d70b81fd7
SHA256

fad79637d9d9fea28e67e1645f19efddce066afc96e299d72d658cb01e032467
SHA512

8e2f22c3d0180169f2802190bfef57ddafc9bbd96cbf8b6f790ff8a26b15fa16607e68376eab27d883c9cb736fde2d70a0d91b1fd6fc4944a4f3e732369291bd
SSDEEP

6144:e2/mTpKjEnLoEV4Ax7hr1HWNpoBH1w8QGsdZEreF879F:KdKjELTV4C7vWNCH1w8QnRFm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3a87a61c1d7de268aeb18083a3199388_JaffaCakes118

Files

3a87a61c1d7de268aeb18083a3199388_JaffaCakes118
.exe windows:5 windows x86 arch:x86

9134a2803ea1709e208885002768107d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

LoadCursorA
DestroyWindow
DispatchMessageW
GetScrollInfo
ChangeClipboardChain
GetClassInfoExA
DrawFrameControl
RegisterClassExA
SetWindowPlacement
BringWindowToTop
GetClassNameA
MapDialogRect
CallWindowProcW
SetCapture
SetWindowTextA
CreateDialogIndirectParamW
ValidateRgn
IsDialogMessageA
MessageBoxA
GetWindow
WaitMessage
GetKeyboardLayoutList
wsprintfA
GetCursorPos
DrawIcon

advapi32

RegQueryValueExA
RegOpenKeyExA
RegOpenKeyA

kernel32

GetCurrentProcess
GlobalSize
GetTimeZoneInformation
GlobalAlloc
SetStdHandle
InterlockedDecrement
FileTimeToDosDateTime
GetFileAttributesW
GetCommandLineW
GetEnvironmentStringsW
ResumeThread
lstrcmpA
Sleep
LoadLibraryA
MultiByteToWideChar
CreateEventA
HeapFree
GetCurrentDirectoryW
SetFilePointer
SetPriorityClass
InitializeCriticalSection
FindResourceA
TlsSetValue
CreateThread
GetProcAddress
SearchPathA
WideCharToMultiByte
GetLocalTime
GetSystemTime
GetSystemDefaultLCID
CompareFileTime
HeapSize
CloseHandle
GetTimeFormatA

ole32

GetHGlobalFromILockBytes
OleTranslateAccelerator
WriteClassStm
OleQueryCreateFromData
GetClassFile
OleCreateEmbeddingHelper
CoTaskMemFree
StringFromCLSID
CoDisconnectObject
OleCreateLinkToFile
CoTreatAsClass

dmstdart

_FXbig
_Dnorm
_Strcoll
_LInf
_FCosh
_Denorm
_LNan
_Dtest
_Dscale
_LDtest

ntdll

ZwSetEvent
NtQueryInformationProcess
RtlInitUnicodeString
NtWriteFile
ZwOpenMutant
NtProtectVirtualMemory
NtQueryValueKey
RtlAddAce

gdi32

RectVisible
CreateBrushIndirect
StretchBlt
DeleteEnhMetaFile
SetROP2
PlayEnhMetaFileRecord
GetPixel
ExtCreatePen
GetObjectType
SetMetaFileBitsEx
SetBkMode
CreatePatternBrush
GetSystemPaletteUse
EndDoc
PatBlt
UnrealizeObject
OffsetRgn

Sections

.text
Size: 152KB - Virtual size: 152KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 55KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 53KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9134a2803ea1709e208885002768107d

Headers

DLL Characteristics

File Characteristics

Imports

user32

advapi32

kernel32

ole32

dmstdart

ntdll

gdi32

Sections

.text Size: 152KB - Virtual size: 152KB

.data Size: 55KB - Virtual size: 55KB

.rsrc Size: 53KB - Virtual size: 56KB

.text
Size: 152KB - Virtual size: 152KB

.data
Size: 55KB - Virtual size: 55KB

.rsrc
Size: 53KB - Virtual size: 56KB