a3c6528a6f9229eeb4d70470c04d1d0f_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

a3c6528a6f9229eeb4d70470c04d1d0f_JaffaCakes118
Size

156KB
MD5

a3c6528a6f9229eeb4d70470c04d1d0f
SHA1

d3a503706df9b5f5d6fc62fd46a14b9dac8e6d3d
SHA256

38a8dc5a6e55626417772ee9697255bc0d0714d7ec5a45c8007b1b00cf868c58
SHA512

b9538448de6b54f6cfa536384bc0028bdb8312b7eb80d91af921a2369606ecf00faaabe5bcefef93d9e18ee322966481dbca9a9fc87c8336579d2d94c0652e5e
SSDEEP

3072:pr8t8CALl2Ww958k7DipF0VxvjhpsgJgEq56ixOkLE01mt+9P:18t/ALTwYknip2VnpsgJa66a0sKP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a3c6528a6f9229eeb4d70470c04d1d0f_JaffaCakes118

Files

a3c6528a6f9229eeb4d70470c04d1d0f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

87f7643a98bee50301e1040ba1c3186e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_lseeki64
malloc
__getmainargs
_errno
__dllonexit
sscanf
_wcslwr
tolower
towupper
_strdup
_CIacos
bsearch
_onexit
memset
_beginthreadex
_ltoa
_wtoi
fseek
_wfopen
_wtol
printf
qsort
wcscpy
fread
time

user32

BeginPaint
MessageBeep
DialogBoxParamW
RegisterClassA
CheckRadioButton
IsDlgButtonChecked
SendDlgItemMessageW
LoadIconA
UnregisterClassW
SetWindowTextW
GetWindowTextLengthW
DrawFocusRect
PeekMessageA
GetDlgCtrlID
GetWindowRect
EndPaint
CharNextA
InflateRect
CharLowerW
wsprintfW
InsertMenuA
OffsetRect
RegisterWindowMessageW
DialogBoxParamA
wsprintfA
MessageBoxW
CreateWindowExA
CheckDlgButton
GetAsyncKeyState
ScreenToClient
SetWindowLongA
GetMessageA
CallWindowProcW
GetSystemMetrics
SetWindowTextA
GetDlgItemTextA
RegisterClassW
TrackPopupMenu
IntersectRect
MsgWaitForMultipleObjects
GetWindowPlacement
GetWindowTextW
ShowWindow
ClientToScreen
LoadBitmapA
LoadIconW
IsIconic

kernel32

HeapFree
GetCommandLineW
GetFileSize
GetSystemDirectoryA
QueryPerformanceCounter
GetCurrentThreadId
FindFirstFileA
IsDebuggerPresent
GetCurrentProcess
GetCPInfo
GetThreadLocale
CompareStringA
TlsAlloc
CreateProcessA
GetVersion
FlushFileBuffers
TlsFree
VirtualAlloc
SystemTimeToFileTime
GlobalLock
CloseHandle
GetLastError
LCMapStringA
GetExitCodeThread
GetComputerNameW
GetCommandLineA
GetDriveTypeW
Sleep
GetACP
OpenMutexA
OutputDebugStringA
HeapReAlloc
SetFileAttributesW
GetWindowsDirectoryA
LeaveCriticalSection
HeapCreate
lstrcpyA
SetLastError
GetVersionExA
GlobalAlloc
SetUnhandledExceptionFilter
FindResourceA
ExitProcess
GetOEMCP
OpenEventW
WideCharToMultiByte
lstrcmpiA
lstrlenA
GetEnvironmentStrings
GetStdHandle
GetFileAttributesW
GetTempPathA
ResumeThread
GetUserDefaultLCID
GetModuleFileNameA
WriteConsoleW
GetSystemTimeAsFileTime

Sections

.text
Size: 152KB - Virtual size: 152KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: 1024B - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.textbss
Size: 512B - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 492B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

87f7643a98bee50301e1040ba1c3186e

Headers

DLL Characteristics

File Characteristics

Imports

msvcrt

user32

kernel32

Sections

.text Size: 152KB - Virtual size: 152KB

.tls Size: 512B - Virtual size: 51KB

BSS Size: 1024B - Virtual size: 51KB

.textbss Size: 512B - Virtual size: 51KB

.rsrc Size: 512B - Virtual size: 492B

.text
Size: 152KB - Virtual size: 152KB

.tls
Size: 512B - Virtual size: 51KB

BSS
Size: 1024B - Virtual size: 51KB

.textbss
Size: 512B - Virtual size: 51KB

.rsrc
Size: 512B - Virtual size: 492B