75231408762aa26f75173f91bc88a150_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

75231408762aa26f75173f91bc88a150_JaffaCakes118
Size

255KB
MD5

75231408762aa26f75173f91bc88a150
SHA1

5d5457f84be81967134eed6e0579641c44c0c5b1
SHA256

4b0105c8863a1325799180d41474989b9a830b75a04fc627a01a22ef451170d8
SHA512

a6070a5ac0dc8247e9c337ffbe2450666f029a4fe85e3cd1fee611d4169fb81418d0362f6e8661ff842efaf50ec049f9a5b0a2f5563cb5e75e8bfa467624ed62
SSDEEP

6144:wBN4GTHrnFFSl9cwaieLjsDbhx/kmH33X3NJWe/mrWRxBgbB:unFFS8BjsDbhxtnNJWe4WRPgF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
75231408762aa26f75173f91bc88a150_JaffaCakes118

Files

75231408762aa26f75173f91bc88a150_JaffaCakes118
.exe windows:5 windows x86 arch:x86

0f1af1de84600cbe1069b8429f5aa45d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

closesocket
ntohs

kernel32

ReadConsoleA
WriteConsoleA
FreeConsole
WriteProcessMemory
lstrlenW
GetModuleFileNameW
ReadProcessMemory
GetCommandLineA
GetLastError
CreateMutexA
GetModuleFileNameA
LoadLibraryA
GetCurrentProcess
LCMapStringA
GetStringTypeW
GetStringTypeA
GetLocaleInfoA
InitializeCriticalSectionAndSpinCount
IsDebuggerPresent
GetModuleHandleA
lstrcmpiA
Sleep
lstrcatA
lstrcpyA
GetProcAddress
LCMapStringW
ExitProcess
lstrlenA
TlsGetValue
SetEnvironmentVariableA
CompareStringW
GetSystemTimeAsFileTime
GetStartupInfoA
HeapFree
HeapAlloc
RaiseException
GetModuleHandleW
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
WideCharToMultiByte
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
RtlUnwind
WriteFile
GetStdHandle
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
VirtualAlloc
HeapReAlloc
HeapSize
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
CompareStringA
MultiByteToWideChar

user32

MessageBoxW
DialogBoxParamA
CreateWindowExA
SetTimer
CreateMenu
GetSysColor
GetParent
GetSubMenu
UpdateWindow
MessageBoxA

gdi32

CreateDCA
DeleteDC
DeleteObject
BitBlt
GetFontData
PolyTextOutA
CreateCompatibleDC
StretchBlt

comdlg32

GetSaveFileNameA
ChooseFontA

shell32

Shell_NotifyIconA

ole32

CoInitialize

Sections

.text
Size: 99KB - Virtual size: 99KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 113KB - Virtual size: 113KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0f1af1de84600cbe1069b8429f5aa45d

Headers

DLL Characteristics

File Characteristics

Imports

ws2_32

kernel32

user32

gdi32

comdlg32

shell32

ole32

Sections

.text Size: 99KB - Virtual size: 99KB

.rdata Size: 37KB - Virtual size: 36KB

.data Size: 4KB - Virtual size: 10KB

.rsrc Size: 113KB - Virtual size: 113KB

.text
Size: 99KB - Virtual size: 99KB

.rdata
Size: 37KB - Virtual size: 36KB

.data
Size: 4KB - Virtual size: 10KB

.rsrc
Size: 113KB - Virtual size: 113KB