87e98ae27e9122be45c6456905c115bf_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

87e98ae27e9122be45c6456905c115bf_JaffaCakes118
Size

532KB
MD5

87e98ae27e9122be45c6456905c115bf
SHA1

6f580b78855a9819c97c4242fdf695cb3ad51746
SHA256

151e41634a00fe62970606bd487eb49d5d3c087a1297081259077e30f1a710e3
SHA512

d2aabe73b7a7cb1bc01fdb3125a65bba36d5ac33cc01765936f114d752f05e137a43327938d2cb7a748a62a211093782247514a27c868232f943e43de4e7c56b
SSDEEP

12288:mKziKUgW2jesYPGrqlrAkdqaFwRo4TtlIlrDOD6m:mgiKUL20VUkVFwRalr26

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
87e98ae27e9122be45c6456905c115bf_JaffaCakes118

Files

87e98ae27e9122be45c6456905c115bf_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8d6fc53119beaec85c492e45e107f115

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

DoEnvironmentSubstA
InternalExtractIconListW
ExtractAssociatedIconExA
SHFreeNameMappings
InternalExtractIconListA

comdlg32

GetOpenFileNameA

comctl32

ImageList_DrawEx
InitCommonControlsEx

user32

SendDlgItemMessageA
DrawTextW
CreateWindowExW
GetMenuInfo
FindWindowExW
GetWindowModuleFileNameW
EnumPropsExW
GetUpdateRect
GetThreadDesktop
CallNextHookEx
DlgDirSelectExA
RegisterClassA
ShowWindow
MessageBoxW
CallMsgFilterW
RegisterClassExA
DlgDirSelectComboBoxExW
DefFrameProcW
DefWindowProcW
EnumDisplayMonitors
DestroyWindow
LoadCursorA
CopyImage
ImpersonateDdeClientWindow

kernel32

HeapReAlloc
VirtualAlloc
GetConsoleMode
HeapCreate
HeapFree
CompareStringA
GetEnvironmentStrings
LeaveCriticalSection
lstrcmpA
GlobalLock
UnhandledExceptionFilter
GetSystemTimeAsFileTime
GetCommandLineA
SetEnvironmentVariableA
GetCPInfo
OpenFileMappingW
RtlUnwind
DeleteCriticalSection
GetTickCount
GetOEMCP
WriteConsoleOutputAttribute
GetLocaleInfoA
GetModuleFileNameA
VirtualQuery
GetProcAddress
GetSystemTime
WriteFile
GetACP
InterlockedDecrement
TlsFree
GetCurrentProcess
SetCurrentDirectoryA
FreeEnvironmentStringsA
IsBadWritePtr
HeapAlloc
TerminateProcess
CompareStringW
FreeEnvironmentStringsW
GetTimeZoneInformation
InitializeCriticalSection
GetLocalTime
GetStartupInfoA
LCMapStringA
SetHandleCount
GetCurrentThreadId
CreateEventW
GetFileType
GetStringTypeW
TlsSetValue
CloseHandle
ReadFile
InterlockedIncrement
ReadConsoleOutputAttribute
TlsGetValue
LCMapStringW
SetLastError
EnterCriticalSection
GetVersion
GetStdHandle
TlsAlloc
FlushFileBuffers
GetCurrentThread
LoadLibraryA
WideCharToMultiByte
SetStdHandle
HeapDestroy
GetStringTypeA
SetFilePointer
CreateMutexA
lstrcpyW
OpenMutexA
GetCurrentProcessId
InterlockedExchange
GetModuleHandleA
MultiByteToWideChar
ExitProcess
QueryPerformanceCounter
GetEnvironmentStringsW
VirtualFree
GetLastError

gdi32

FloodFill
GetWinMetaFileBits
GetCharWidthW
SetBkMode
CreateScalableFontResourceA
GetEnhMetaFileA
Arc
PolyPolygon
LineTo
SetPixelFormat
GetCharWidthFloatA
GetMapMode
AbortPath

Sections

.text
Size: 148KB - Virtual size: 144KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 252KB - Virtual size: 251KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 108KB - Virtual size: 126KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8d6fc53119beaec85c492e45e107f115

Headers

File Characteristics

Imports

shell32

comdlg32

comctl32

user32

kernel32

gdi32

Sections

.text Size: 148KB - Virtual size: 144KB

.rdata Size: 252KB - Virtual size: 251KB

.data Size: 108KB - Virtual size: 126KB

.rsrc Size: 20KB - Virtual size: 19KB

.text
Size: 148KB - Virtual size: 144KB

.rdata
Size: 252KB - Virtual size: 251KB

.data
Size: 108KB - Virtual size: 126KB

.rsrc
Size: 20KB - Virtual size: 19KB