8bce311ce997f5e14ba11fee383b26c0_JaffaCakes118

General

Target

8bce311ce997f5e14ba11fee383b26c0_JaffaCakes118
Size

60KB
MD5

8bce311ce997f5e14ba11fee383b26c0
SHA1

f8734a539fab70def2fdeeebfc8c6c4e5f4f7668
SHA256

a73b1660513e59ed0e0852385be5dd4dbefd1c6166b9de3d063e60fce5749312
SHA512

b78669c7a4f3716498847129224166993e2e79bbb20b44e8dba0acd832940a5871bf413777183cdf2d9c56fcd3280c44c49d44740a3c9a40222a15bcbb8fc335
SSDEEP

768:8ChKh4zWLFlseFn+XO0dwpgF7su+fK9xMW/RUBeuaRzLJYawHWkYJlmzN:8Ci4zADcJd9sXCxMWRLuaRzLJYwFJlM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8bce311ce997f5e14ba11fee383b26c0_JaffaCakes118

Files

8bce311ce997f5e14ba11fee383b26c0_JaffaCakes118
.dll windows:4 windows x86 arch:x86

ca991a93b359693b8aca4e3d460dea49

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
OpenEventA
GetLastError
WaitForSingleObject
CreateEventA
CreateThread
LoadLibraryA
GetVersionExA
GetModuleFileNameA
HeapFree
HeapReAlloc
HeapAlloc
SetEvent
Sleep
HeapSize
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetCurrentThreadId
GetCommandLineA
GetACP
GetOEMCP
GetCPInfo
TlsAlloc
SetLastError
TlsFree
TlsSetValue
TlsGetValue
GetProcAddress
GetModuleHandleA
LCMapStringA
WideCharToMultiByte
MultiByteToWideChar
LCMapStringW
ExitProcess
TerminateProcess
GetCurrentProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
UnhandledExceptionFilter
WriteFile
GetStringTypeA
GetStringTypeW
LeaveCriticalSection
EnterCriticalSection
GetLocaleInfoA
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
InitializeCriticalSection
RtlUnwind
InterlockedExchange

user32

EnumWindows
GetWindowRect
ScreenToClient
PostMessageA
GetWindowTextA
GetDlgItem
IsWindowVisible
ShowWindow
GetDlgCtrlID
SendMessageA
SetWindowsHookExA
CallNextHookEx

Sections

.text
Size: 40KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ca991a93b359693b8aca4e3d460dea49

Headers

File Characteristics

Imports

kernel32

user32

Sections

.text Size: 40KB - Virtual size: 37KB

.rdata Size: 8KB - Virtual size: 6KB

.data Size: 4KB - Virtual size: 4KB

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 40KB - Virtual size: 37KB

.rdata
Size: 8KB - Virtual size: 6KB

.data
Size: 4KB - Virtual size: 4KB

.reloc
Size: 4KB - Virtual size: 3KB