4510d61b657d93880ee9b71258473c57_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

4510d61b657d93880ee9b71258473c57_JaffaCakes118
Size

174KB
MD5

4510d61b657d93880ee9b71258473c57
SHA1

bd418e2af96beac0ab40ad3d13e81df2bdf4265c
SHA256

dd037e57df6a0d82045fc670f5bbb2e8b609e2f357ccfe2ea507aff4020f991e
SHA512

c453efcc74bd32b7f137ebe643335cc6ef9b1ebe2a8cffb0e67e896b0e88137dad076664520858a0ea2d382edbaefc75eae1b9758eaa5ab99a57140a6c8b42ea
SSDEEP

3072:qpmM5dGpNPN/RVI/SyFZ7nOH18zzR1Mpv7kgTEwLWjRXV7aeSAijldo8l:SWNPZReTa18/RCpiwmRF+e0jnj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4510d61b657d93880ee9b71258473c57_JaffaCakes118

Files

4510d61b657d93880ee9b71258473c57_JaffaCakes118
.exe windows:5 windows x86 arch:x86

eda19ce41efad77371622c35ce5783e0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

memcpy
_unlock
fclose
wcscoll
__dllonexit
malloc

kernel32

HeapFree
LoadLibraryA
GetVersionExW
GetUserDefaultLCID
EnumUILanguagesW
GetCurrentThread
GetVolumeNameForVolumeMountPointW
GetTickCount
FindFirstFileW
InterlockedExchangeAdd
SetErrorMode
GlobalUnlock
CloseHandle
GlobalAlloc
GetWindowsDirectoryW
UnhandledExceptionFilter
SleepEx
GetPriorityClass
FindVolumeClose
VirtualProtect
GetModuleHandleA
GetVolumePathNamesForVolumeNameW
LocalAlloc

btseakui

_Getcvt
_LDscale
_Dtest
_Rteps
_FInf
_Nan
_LDtest
_FExp
_FCosh
_Getctype
_Hugeval

shell32

SHBrowseForFolderW
DragQueryPoint
SHGetPathFromIDListW

gdi32

EnumFontFamiliesExW
CreateCompatibleBitmap
GetTextMetricsW
SetBkColor
DeleteObject

user32

PeekMessageW
SetCapture
GetMonitorInfoW
GetSysColorBrush
WindowFromPoint
LoadStringW
SetFocus
LoadAcceleratorsW
RegisterClassExW
GetWindow
GetWindowTextLengthW
CharLowerW
InflateRect
GetDlgItem
SetForegroundWindow
DefWindowProcW
OpenClipboard
TrackPopupMenuEx
SetDlgItemTextW
LockWindowUpdate
OffsetRect
SetWindowTextW
GetWindowLongW
IsChild
CreateDialogParamW
UnregisterClassA
UnhookWindowsHookEx
GetWindowTextW

ntdll

NtOpenMutant
NtPulseEvent
NtOpenEventPair
NtMapViewOfSection
NtOpenSection
NtQueryInformationFile
NtQuerySemaphore
NtClearEvent
NtOpenFile

Sections

.text
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 118KB - Virtual size: 120KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

eda19ce41efad77371622c35ce5783e0

Headers

DLL Characteristics

File Characteristics

Imports

msvcrt

kernel32

btseakui

shell32

gdi32

user32

ntdll

Sections

.text Size: 19KB - Virtual size: 19KB

.data Size: 36KB - Virtual size: 35KB

.rsrc Size: 118KB - Virtual size: 120KB

.text
Size: 19KB - Virtual size: 19KB

.data
Size: 36KB - Virtual size: 35KB

.rsrc
Size: 118KB - Virtual size: 120KB