69e83126e526bda1edb44c802d9a1a6c_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

69e83126e526bda1edb44c802d9a1a6c_JaffaCakes118
Size

72KB
MD5

69e83126e526bda1edb44c802d9a1a6c
SHA1

282fbb001552b0c587b8cb6ef2148cf81fc32903
SHA256

d0160d3e609d0da8b16b906ab5de7466a3afdf4c9a3978ea977f85f08d35d62d
SHA512

69c09188cbd7cccfd6d7ada81571e061318fd3d27c7ce3493221a75dc45285cf48e587ebc0cb8810e54a9f9778988ed445177e63fb0c48ffd6b2cf1082285753
SSDEEP

1536:k1jzZ6Kkqg9H5wLjqvE1DNCZW7ijMYFfigRex8Hw:kZzZQqgULjqEtY3jMY0bMw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
69e83126e526bda1edb44c802d9a1a6c_JaffaCakes118

Files

69e83126e526bda1edb44c802d9a1a6c_JaffaCakes118
.exe windows:5 windows x86 arch:x86

94fc714abb7e1d00fe6eac9c955017be

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStringTypeW
MultiByteToWideChar
LCMapStringW
HeapSize
RtlUnwind
Sleep
LoadLibraryW
EnterCriticalSection
HeapReAlloc
HeapCreate
GlobalAlloc
GetCurrentProcess
HeapFree
HeapAlloc
LeaveCriticalSection
TerminateProcess
IsDebuggerPresent
UnhandledExceptionFilter
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
RaiseException
GetCommandLineA
HeapSetInformation
GetStartupInfoW
SetUnhandledExceptionFilter
GetProcAddress
GetModuleHandleW
ExitProcess
DecodePointer
WriteFile
GetStdHandle
GetModuleFileNameW
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
GetLastError
InterlockedDecrement
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
IsProcessorFeaturePresent

user32

RegisterClassA
ChildWindowFromPoint
GetMessageA
FillRect
GetLastActivePopup
LoadIconA
LoadCursorA
GetDC
TranslateMessage
wsprintfA
SetWindowLongA
MessageBoxA
GetWindowLongA
CreateWindowExA
GetSysColor
IsWindow
DispatchMessageA

gdi32

SelectObject
TextOutW
GetStockObject
CreateSolidBrush
SetPixel

oleaut32

GetErrorInfo

ws2_32

WSACleanup
WSAStartup

mpr

WNetGetUniversalNameA
WNetOpenEnumA
WNetCloseEnum

Sections

.text
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 38KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

94fc714abb7e1d00fe6eac9c955017be

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

oleaut32

ws2_32

mpr

Sections

.text Size: 21KB - Virtual size: 20KB

.rdata Size: 11KB - Virtual size: 11KB

.data Size: 38KB - Virtual size: 45KB

.rsrc Size: 512B - Virtual size: 436B

.text
Size: 21KB - Virtual size: 20KB

.rdata
Size: 11KB - Virtual size: 11KB

.data
Size: 38KB - Virtual size: 45KB

.rsrc
Size: 512B - Virtual size: 436B