6a8b9e1b17a74cadbbaac254a83caec9_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

6a8b9e1b17a74cadbbaac254a83caec9_JaffaCakes118
Size

50KB
MD5

6a8b9e1b17a74cadbbaac254a83caec9
SHA1

b8fc289d3a7ef19c4ebdd9613aeefc6ec5203fa3
SHA256

47c7c25fd2773c9a98906e0e10c509c1613f863f5c14e834532578769f05a1a1
SHA512

354d56689fa2b7acffd9d0fd30f3e9c712045ebba614fe2c9524016e38fb61db9823d444fe786b1aeb2f8f769f6e66a4aadad618778bf4f6609f64a718a3ddd9
SSDEEP

768:Giu2sx7aRb0azZ+v6RAIyzfRT/giyXifDk1nR43Hgro+mgcGDa2N+w9+cryuh:GES7Yb0LiRALRRyNrQH0oZs+ADh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6a8b9e1b17a74cadbbaac254a83caec9_JaffaCakes118

Files

6a8b9e1b17a74cadbbaac254a83caec9_JaffaCakes118
.dll windows:4 windows x86 arch:x86

041950e19a234fb1dc9f96f29458a41a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

VirtualProtect
CreateFileMappingW
WaitForSingleObject
UnmapViewOfFile
GetCurrentProcessId
MapViewOfFile
ReleaseMutex
HeapFree
HeapAlloc
lstrlenW
GetTickCount
IsBadWritePtr
WriteProcessMemory
ReadProcessMemory
LocalFree
LocalAlloc
GetLastError
InterlockedExchange
GetCurrentProcess
DuplicateHandle
OpenProcess
CloseHandle

user32

FindWindowExW
LoadStringW
IsWindow
GetWindowThreadProcessId
IsWindowVisible
IsMenu
SetRectEmpty
ScreenToClient
FindWindowW
GetClientRect
GetWindowLongW
SendMessageW
GetWindowRect
GetWindow
wsprintfW
MapWindowPoints
CharLowerBuffW
CharNextW
PtInRect
GetMenu
GetParent
GetDesktopWindow
MessageBeep
SystemParametersInfoW
GetMenuItemCount
GetSubMenu
GetMenuItemInfoW
GetMenuStringW
GetPropW
GetForegroundWindow

msvcrt

rand
_onexit
__dllonexit
_initterm
malloc
free
_adjust_fdiv
_except_handler3
srand
time

msvcp60

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?cin@std@@3V?$basic_istream@DU?$char_traits@D@std@@@1@A
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAH@Z
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@PBD@Z
?endl@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z
??1_Winit@std@@QAE@XZ
??0_Winit@std@@QAE@XZ
??1Init@ios_base@std@@QAE@XZ
??0Init@ios_base@std@@QAE@XZ

Sections

.text
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

041950e19a234fb1dc9f96f29458a41a

Headers

File Characteristics

Imports

kernel32

user32

msvcrt

msvcp60

Sections

.text Size: 44KB - Virtual size: 43KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 512B - Virtual size: 34KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 1024B - Virtual size: 928B

.text
Size: 44KB - Virtual size: 43KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 512B - Virtual size: 34KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 1024B - Virtual size: 928B