44761303dc5554eb7d3723054a9f37a5_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

44761303dc5554eb7d3723054a9f37a5_JaffaCakes118
Size

116KB
MD5

44761303dc5554eb7d3723054a9f37a5
SHA1

ae8991e9865a3dabd8f94a02c1e1c7d782852b3c
SHA256

d8952e647a9b10ffa5c74977c3aeacc32f34d5488bef8067ab74a4dde0d27561
SHA512

0ed1d34fff25592e4d4960a330ee96b6073213cceabf19d09a33bde2c7bd08190729ebc8a29e6848752cfbbfa9db97b56e8cd49480edca2cb58172dbcb4ccf9f
SSDEEP

1536:CEO89AbSD/7DKHvBFn3pUVWfMTBlzGzEgqMe3Fuq0XDdMOUBWRZas4V:bSGgjn3GVWfMTBlmTq99IdxU4ZaV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
44761303dc5554eb7d3723054a9f37a5_JaffaCakes118

Files

44761303dc5554eb7d3723054a9f37a5_JaffaCakes118
.dll windows:4 windows x86 arch:x86

981485aad6d38aa705ebb72a53bebb7b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
SetUnhandledExceptionFilter
SetLastError
FreeLibrary
DisableThreadLibraryCalls
GetVersionExA
GetFileAttributesW
ReleaseMutex
WaitForSingleObject
CreateMutexW
GetLocaleInfoW
GetGeoInfoW
GetTickCount
GetUserDefaultLCID
GetUserGeoID
LocalFree
LocalAlloc
GetUserDefaultLangID
HeapFree
FormatMessageW
lstrcmpW
GetProcessHeap
HeapAlloc
lstrlenW
InterlockedDecrement
InterlockedIncrement
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
QueryPerformanceCounter
InterlockedCompareExchange
Sleep
InterlockedExchange
CloseHandle
GetLastError
GetCommandLineA
GlobalFree
VirtualProtect
GetSystemDefaultLCID
GlobalAlloc

user32

PostMessageW
GetParent
GetWindowLongW
SetWindowLongW
GetDlgItem
LoadStringW
SetDlgItemTextW
IsWindowVisible
SendMessageW
GetDlgItemTextW
LoadIconW
DestroyIcon
EnableWindow
SetFocus
MessageBoxW
CheckDlgButton
SendDlgItemMessageW
SetCursor
LoadCursorW
CharLowerBuffW
KillTimer
ShowWindow
IsDlgButtonChecked

advapi32

RegOpenKeyExW
DuplicateTokenEx
GetTokenInformation
RevertToSelf
RegCloseKey
RegCreateKeyExW
SetThreadToken

gdi32

GetObjectType
GetCurrentObject
DeleteDC
GetDeviceCaps
GetObjectA

ole32

CreateBindCtx
OleUninitialize
CoCreateInstance
CoTaskMemFree
StringFromCLSID
CoCreateGuid
CoInitializeEx

msvcr71

_except_handler3
_adjust_fdiv
_amsg_exit
_XcptFilter
_onexit
malloc
free
_wcsicmp
memset
_initterm
memcpy
_vsnwprintf
__CppXcptFilter
__dllonexit

Sections

.text
Size: 56KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 40KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

981485aad6d38aa705ebb72a53bebb7b

Headers

File Characteristics

Imports

kernel32

user32

advapi32

gdi32

ole32

msvcr71

Sections

.text Size: 56KB - Virtual size: 52KB

.rdata Size: 40KB - Virtual size: 36KB

.data Size: 4KB - Virtual size: 34KB

.rsrc Size: 8KB - Virtual size: 5KB

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 56KB - Virtual size: 52KB

.rdata
Size: 40KB - Virtual size: 36KB

.data
Size: 4KB - Virtual size: 34KB

.rsrc
Size: 8KB - Virtual size: 5KB

.reloc
Size: 4KB - Virtual size: 3KB