86064458e4024e4bb1b316e46498c3ea_JaffaCakes118

General

Target

86064458e4024e4bb1b316e46498c3ea_JaffaCakes118
Size

313KB
MD5

86064458e4024e4bb1b316e46498c3ea
SHA1

f3651e286ef732aeeeb1d5c06212535385d685c9
SHA256

91bfc1e0e0b098ffeb7795b0d27312b846d3b053f02b296313c8cee3832c4ffa
SHA512

996813485c6e332488b84a8953ce7a0f02a38e8f3a7d3bf1adc717a9dd68fbe37b23396381bdf849c75a0b894722a955d6ccc677941cc48913067e1f37f60b94
SSDEEP

6144:u5Kn/XXpU/aK+QJOg1pTSeKciJ/xVWXSYfOZcoXx4fsQE47nv5:qKnRo1JOq0ciJZr2sY5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
86064458e4024e4bb1b316e46498c3ea_JaffaCakes118

Files

86064458e4024e4bb1b316e46498c3ea_JaffaCakes118
.dll windows:4 windows x86 arch:x86

de8e5db5466b75e655cc14e9bddb8027

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
CreateFileA
DeleteFileA
ExitProcess
FindClose
FindFirstFileA
FreeLibrary
GetFileSize
GetFileType
GetProcAddress
LoadLibraryA
ReadFile
SetEndOfFile
SetFilePointer
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
VirtualProtect
WinExec
WriteFile

user32

GetWindowDC
SetCursor
SetForegroundWindow
SetMenu
SetMenuItemInfoA
SetPropA
SetScrollPos
SetScrollRange
SetSysColors
SetTimer
SetWindowLongA
SetWindowPos
ShowWindow
SystemParametersInfoA
TranslateMessage
UpdateWindow
ValidateRect
WaitMessage
wvsprintfA

gdi32

CombineRgn
CreateBrushIndirect
CreateCompatibleBitmap
CreateCompatibleDC
CreateDIBSection
CreateRectRgn
CreateSolidBrush
DeleteDC
DeleteObject
GetDeviceCaps
GetPixel
GetStockObject
MoveToEx
Rectangle
RestoreDC
SaveDC
SelectObject
SetBkColor
SetBkMode
SetBrushOrgEx
SetPixel
SetStretchBltMode
SetTextColor
SetWindowOrgEx
StretchBlt
TextOutA

shell32

DllRegisterServer
DllUnregisterServer
DragAcceptFiles
DragFinish
DragQueryFile
DragQueryPoint
SHBrowseForFolder
Shell_NotifyIcon
ShellExecuteA
SHGetPathFromIDList

comdlg32

ChooseColorA
ChooseFontA
GetSaveFileNameA

Sections

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

CODE
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

CODE
Size: 302KB - Virtual size: 612KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

de8e5db5466b75e655cc14e9bddb8027

Headers

File Characteristics

Imports

kernel32

user32

gdi32

shell32

comdlg32

Sections

.rsrc Size: 8KB - Virtual size: 8KB

CODE Size: 2KB - Virtual size: 4KB

CODE Size: 302KB - Virtual size: 612KB

.rsrc
Size: 8KB - Virtual size: 8KB

CODE
Size: 2KB - Virtual size: 4KB

CODE
Size: 302KB - Virtual size: 612KB