8ae5c7968f1a273df8aa37d4548c35d3_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

8ae5c7968f1a273df8aa37d4548c35d3_JaffaCakes118
Size

201KB
MD5

8ae5c7968f1a273df8aa37d4548c35d3
SHA1

98d156049df452bac40cde36af75def77c9f8afb
SHA256

f3bd02418e48ee0d4f48ccb3fc8c15d260abd5da666062d7af0f01260b958cfe
SHA512

7ec669ac2cba9453b4c903de9b4dea86397709283bb3abd0f6c7a5bc97af725a504dfbedda939ca513bcec87e6ef0ca738fed3603096b8bd0856a9d8e5e3f473
SSDEEP

3072:pP/vjqD31pq3OZGMneT5+t3r++J/aSWxuM1d6JdRIN12W8tD8FTpTLimttNwZHVz:l/7yk3OZoTUV7YCRI/YtIqmttCZQRY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8ae5c7968f1a273df8aa37d4548c35d3_JaffaCakes118

Files

8ae5c7968f1a273df8aa37d4548c35d3_JaffaCakes118
.dll windows:4 windows x86 arch:x86

49791ccf29aaf3d1312435e0714ecfbe

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

comctl32

ImageList_Read
ImageList_Remove
ImageList_Add
ImageList_Create

kernel32

HeapFree
LocalReAlloc
GetCurrentProcess
HeapAlloc
VirtualAllocEx
SetEvent
MoveFileExA
GetModuleHandleW
ExitProcess
GetUserDefaultLCID
LocalFree
lstrlenW
LoadLibraryA
GetCurrentThread
ExitThread
EnumCalendarInfoA
lstrcmpiA
GetLastError
GetStringTypeW
GetDiskFreeSpaceA
WideCharToMultiByte
MoveFileA
GlobalDeleteAtom
GetSystemDefaultLangID

user32

MsgWaitForMultipleObjects
GetWindow
ShowWindow
IsCharLowerA
IsIconic
IsCharUpperA
DefWindowProcA
DrawFrameControl
IsDlgButtonChecked
InvalidateRect
SetMenuItemInfoA
UnregisterClassA
IsWindowEnabled
GetKeyboardLayout
GetClassLongA
GetDesktopWindow
GetCursor
TrackPopupMenu
SetParent
GetActiveWindow
MessageBoxA
AdjustWindowRectEx
ClientToScreen
GetDC
GetWindowLongA
DestroyCursor
GetMenuStringA
EnableWindow
IsDialogMessageA
GetFocus
PostQuitMessage
InsertMenuItemA
GetScrollPos
SetCapture
SetWindowPlacement
EnumThreadWindows
MoveWindow
DrawEdge
RegisterWindowMessageA
GetLastActivePopup
DestroyIcon
PeekMessageA
EqualRect
FrameRect
GetMenu
GetMenuItemCount
GetKeyboardLayoutList
GetClientRect
SetMenu
CharUpperA
SetForegroundWindow
GetMenuState
DestroyWindow
LoadIconA
DrawIconEx
SetWindowLongA
GetWindowDC
InsertMenuA
CreateIcon
GetMenuItemInfoA
DispatchMessageA

gdi32

CreateDIBitmap
CreateBrushIndirect

Exports

Exports

_oAXZX0@12

Sections

.text
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 152KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 147KB - Virtual size: 147KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.badata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

49791ccf29aaf3d1312435e0714ecfbe

Headers

File Characteristics

Imports

comctl32

kernel32

user32

gdi32

Exports

Exports

Sections

.text Size: 19KB - Virtual size: 19KB

.rdata Size: 9KB - Virtual size: 152KB

.data Size: 147KB - Virtual size: 147KB

.edata Size: 4KB - Virtual size: 3KB

.badata Size: 2KB - Virtual size: 1KB

.rsrc Size: 14KB - Virtual size: 13KB

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 19KB - Virtual size: 19KB

.rdata
Size: 9KB - Virtual size: 152KB

.data
Size: 147KB - Virtual size: 147KB

.edata
Size: 4KB - Virtual size: 3KB

.badata
Size: 2KB - Virtual size: 1KB

.rsrc
Size: 14KB - Virtual size: 13KB

.reloc
Size: 4KB - Virtual size: 3KB