735c95575116c2b8dfde36ba6aa00ad6_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

735c95575116c2b8dfde36ba6aa00ad6_JaffaCakes118
Size

170KB
MD5

735c95575116c2b8dfde36ba6aa00ad6
SHA1

b933b32793941bcc9f791dfb8c81a004b5c8bdad
SHA256

281dc888915950b8249be1788b5f32755bed87a702aaa01ed0c0094443e58e71
SHA512

085b51b856680450cf7dd9710f028cfc7d63d509df4e7f78ac54979c50c3f97591367a271a24d019331cf24fd33830c088ef762a163593ebfe87a29afc0dddf7
SSDEEP

3072:quxZ08WcTkkCAG5Dz4UFuCnzy0BUQ1eF06ZH/3cNYmI:1qcTkkCj1ZW0BUpx0NC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
735c95575116c2b8dfde36ba6aa00ad6_JaffaCakes118

Files

735c95575116c2b8dfde36ba6aa00ad6_JaffaCakes118
.exe windows:5 windows x86 arch:x86

6fab4b23ae171e96b4199c029b109a84

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

DestroyWindow
UpdateWindow
SendDlgItemMessageA
SetWindowTextA
EndDialog
GetDlgItem
GetWindowTextA
SendMessageA
GetDesktopWindow
GetWindowRect
GetClientRect
SetWindowPos
DialogBoxParamA
MessageBoxA
wsprintfA

shell32

SHBrowseForFolderA
SHGetPathFromIDListA

kernel32

HeapFree
HeapSize
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
MultiByteToWideChar
UnmapViewOfFile
GetSystemInfo
MapViewOfFile
DeleteFileA
CopyFileA
SetEndOfFile
SetFilePointer
FlushViewOfFile
GetLocalTime
GetTempPathA
GetFileSize
GetVersionExA
CloseHandle
OpenSemaphoreA
LocalFree
OpenFileMappingA
lstrcatA
lstrcpyA
LocalAlloc
lstrlenA
OpenEventA
CreateEventA
CreateFileMappingA
CreateFileA
GetProcAddress
GetModuleHandleA
CreateThread
Sleep
CreateProcessA
GetModuleFileNameA
SetFileAttributesA
GetFileAttributesA
GetLastError
CreateDirectoryA
GetTickCount
WritePrivateProfileSectionA
GetPrivateProfileSectionA
GetWindowsDirectoryA
GetShortPathNameA
MoveFileExA
SetEvent
LoadLibraryA
GetCommandLineA
GetStartupInfoA
HeapCreate
VirtualFree
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
HeapAlloc
VirtualAlloc
HeapReAlloc
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
ExitProcess
WriteFile
GetStdHandle
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeCriticalSectionAndSpinCount
RtlUnwind
LCMapStringA

Sections

.text
Size: 62KB - Virtual size: 61KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6fab4b23ae171e96b4199c029b109a84

Headers

DLL Characteristics

File Characteristics

Imports

user32

shell32

kernel32

Sections

.text Size: 62KB - Virtual size: 61KB

.rdata Size: 19KB - Virtual size: 19KB

.data Size: 4KB - Virtual size: 7KB

.rsrc Size: 6KB - Virtual size: 5KB

.text
Size: 62KB - Virtual size: 61KB

.rdata
Size: 19KB - Virtual size: 19KB

.data
Size: 4KB - Virtual size: 7KB

.rsrc
Size: 6KB - Virtual size: 5KB