a3542a5f3bef98cd26629d36e033b5a1_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

a3542a5f3bef98cd26629d36e033b5a1_JaffaCakes118
Size

332KB
MD5

a3542a5f3bef98cd26629d36e033b5a1
SHA1

fa71c40b75bb15106f243da8652af2f076e03439
SHA256

8e868aef83f92383a9085ddc62aa78600206a919b193dccd2989e5a7bfab1aa1
SHA512

8ca23eee85af65f32151bfcda044666930cc95f1b09848d7025e27e37b0777494df6ce01252b7854413258be68de59e85362a13408886516c6fe5ecbbf4fabe1
SSDEEP

6144:jnbSUzO/zlrDqNKfbw/dHk3SVevMfRryihYhLr7:DbE/zVwKjWHk4e5ihYt7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a3542a5f3bef98cd26629d36e033b5a1_JaffaCakes118

Files

a3542a5f3bef98cd26629d36e033b5a1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f4735cc524dcda53b9a2f7d117b3a4f0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LocalAlloc
GetLocalTime
Sleep
InterlockedExchange
lstrcatW
lstrlenW
lstrcpynW
GetModuleHandleW
GetProcAddress
LoadLibraryW
lstrcmpiW
MultiByteToWideChar
GetProfileStringW
lstrcmpA
lstrcpynA
lstrcmpW
GetWindowsDirectoryW
DisableThreadLibraryCalls
FreeLibrary
lstrlenA
LoadLibraryExW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
LocalFree
IsBadReadPtr
InterlockedDecrement
InterlockedIncrement
IsBadWritePtr
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
HeapSize
GetCPInfo
GetOEMCP
GetACP
LoadLibraryA
GetSystemInfo
GetFileType
SetHandleCount
GetEnvironmentStringsW
GetLastError
WideCharToMultiByte
lstrcpyW
CloseHandle
CreateFileW
GetLocaleInfoA
GetCommandLineA
InterlockedCompareExchange
VirtualProtect
HeapAlloc
HeapFree
RtlUnwind
GetModuleHandleA
GetStartupInfoA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
VirtualQuery
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW

user32

LoadStringW
MessageBoxW
GetDlgItem
GetFocus
EnableWindow
SendMessageW
SetDlgItemTextW
LoadIconW
SendDlgItemMessageW
EnumDisplayDevicesW
wsprintfW
DialogBoxParamW
GetWindowLongW
SetWindowLongW
ShowWindow
MoveWindow
ScreenToClient
GetWindowRect
SetFocus

advapi32

RegCloseKey
RegQueryValueExW

gdi32

CreateICW
GetDeviceCaps
DeleteDC

Sections

.text
Size: 50KB - Virtual size: 49KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 272KB - Virtual size: 543KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f4735cc524dcda53b9a2f7d117b3a4f0

Headers

File Characteristics

Imports

kernel32

user32

advapi32

gdi32

Sections

.text Size: 50KB - Virtual size: 49KB

.rdata Size: 6KB - Virtual size: 5KB

.data Size: 272KB - Virtual size: 543KB

.rsrc Size: 3KB - Virtual size: 2KB

.text
Size: 50KB - Virtual size: 49KB

.rdata
Size: 6KB - Virtual size: 5KB

.data
Size: 272KB - Virtual size: 543KB

.rsrc
Size: 3KB - Virtual size: 2KB