8b5886ff4328aa456d314e412c44bb57_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

8b5886ff4328aa456d314e412c44bb57_JaffaCakes118
Size

453KB
MD5

8b5886ff4328aa456d314e412c44bb57
SHA1

e28d39bc9baff801493e4784f246f9a2258df9f5
SHA256

7b3bc364ff49bfd7b5cb23c351c861105478465cb4b5478092f7f4920b7d65ee
SHA512

768339336a7e214e61a6f8c313330f61f803058319a157fe0bfcd313143097a04271823b3939461e2d80eb61e7ad451dc9b3f698b81e3897f235ad018b682443
SSDEEP

3072:lU5648JB8FmHTafIa+XiRKCPqp2Jda45+8BSf6/yEhA/a9U8k:FQwzFa+XigCPycda4U88f6/ywAi9X

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8b5886ff4328aa456d314e412c44bb57_JaffaCakes118

Files

8b5886ff4328aa456d314e412c44bb57_JaffaCakes118
.dll windows:5 windows x86 arch:x86

3b5ef13626c4f31791f5d566751f6240

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

HeapSize
GetStringTypeW
CloseHandle
CreateFileW
GetWindowsDirectoryW
Sleep
GetLocaleInfoA
CreateThread
GetStringTypeA
LCMapStringW
GetCurrentThreadId
GetCommandLineA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetModuleHandleW
GetProcAddress
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetLastError
InterlockedDecrement
HeapFree
ExitProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapCreate
HeapDestroy
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LeaveCriticalSection
EnterCriticalSection
HeapAlloc
VirtualAlloc
HeapReAlloc
WriteFile
LoadLibraryA
InitializeCriticalSectionAndSpinCount
RtlUnwind
LCMapStringA
MultiByteToWideChar

user32

BeginPaint
RedrawWindow
EnableWindow
EndDialog
GetDlgItem
GetWindowTextW
ShowWindow
SetTimer
DialogBoxParamW
LoadBitmapW
MessageBoxW

gdi32

TextOutW
SetTextColor
SetBkMode
DeleteDC
BitBlt
SelectObject
CreateCompatibleDC
CreateFontW
GetTextExtentPoint32W

shell32

ShellExecuteW

Sections

.text
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 406KB - Virtual size: 406KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3b5ef13626c4f31791f5d566751f6240

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

shell32

Sections

.text Size: 28KB - Virtual size: 28KB

.rdata Size: 9KB - Virtual size: 8KB

.data Size: 3KB - Virtual size: 6KB

.rsrc Size: 406KB - Virtual size: 406KB

.reloc Size: 4KB - Virtual size: 4KB

.text
Size: 28KB - Virtual size: 28KB

.rdata
Size: 9KB - Virtual size: 8KB

.data
Size: 3KB - Virtual size: 6KB

.rsrc
Size: 406KB - Virtual size: 406KB

.reloc
Size: 4KB - Virtual size: 4KB