a40239f1404ba82b332a1f1a550d3132_JaffaCakes118

General

Target

a40239f1404ba82b332a1f1a550d3132_JaffaCakes118
Size

157KB
MD5

a40239f1404ba82b332a1f1a550d3132
SHA1

2c8d213ec9c7d1d18bba2c69bacd0820d7417c4f
SHA256

ca6610f6cf83a4a1c5d628f079ebb9a5a054356caea41f0bd8c278aa1f9a3870
SHA512

a6a7b2f223004784622392491a13ff8bba361b7075a3f655d94654692a6440cd71b4e62bfb1dd77906dc2e12b24c51f1e403b1bd09d9e7e66fef91e099334662
SSDEEP

3072:UIlQ1LQMvuWKuHdFmfPXFxvYGewhQUR2mR22+BuSE4lI6nMkO1NNhM4:Uv1LQMWW1dwfPLAGl2URH2XBuoMkO1PR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a40239f1404ba82b332a1f1a550d3132_JaffaCakes118

Files

a40239f1404ba82b332a1f1a550d3132_JaffaCakes118
.dll windows:4 windows x86 arch:x86

66dfbc812ad895b29f9c065eccb75643

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

comdlg32

GetOpenFileNameW
ChooseFontW
GetSaveFileNameW
CommDlgExtendedError

kernel32

GetCurrentProcessId
QueryPerformanceCounter
GetCurrentProcess
GetConsoleHardwareState
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetExitCodeProcess
FindFirstFileW
CopyFileW
FindNextFileW
SetFileAttributesW
MoveFileW
FindClose
SetLastError
OpenProcess
UnregisterWaitEx
RegisterWaitForSingleObject
LeaveCriticalSection
EnterCriticalSection
LoadLibraryExW
FormatMessageW
GetTickCount
CreateEventW
CreateThread
GetCurrentThreadId
OutputDebugStringA
GetCurrentProcessId
ResetEvent
SetEvent
GetFileAttributesExW
ReleaseMutex
WaitForMultipleObjects
CreateMutexW
CloseHandle
WaitForSingleObject
Sleep
LoadLibraryW
GetProcAddress
FreeLibrary
LocalAlloc
LocalFree
GetLastError
InterlockedDecrement
InterlockedIncrement
InterlockedCompareExchange
InterlockedExchange
GetSystemTimeAsFileTime
TerminateProcess
DeleteFileW
RemoveDirectoryW
SetEnvironmentVariableW
DisableThreadLibraryCalls
DebugBreak
InitializeCriticalSectionAndSpinCount

oleaut32

DispInvoke
CreateErrorInfo
OleSavePictureFile
GetErrorInfo
SetErrorInfo
GetActiveObject
VariantInit
SysFreeString

Exports

Exports

AlphaBlend

Sections

.text
Size: 105KB - Virtual size: 117KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 47KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 338B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

66dfbc812ad895b29f9c065eccb75643

Headers

File Characteristics

Imports

comdlg32

kernel32

oleaut32

Exports

Exports

Sections

.text Size: 105KB - Virtual size: 117KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 47KB - Virtual size: 47KB

.reloc Size: 512B - Virtual size: 338B

.text
Size: 105KB - Virtual size: 117KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 47KB - Virtual size: 47KB

.reloc
Size: 512B - Virtual size: 338B