a8a11a2873c6a21ae8c0916dad013f7c_JaffaCakes118

General

Target

a8a11a2873c6a21ae8c0916dad013f7c_JaffaCakes118
Size

48KB
MD5

a8a11a2873c6a21ae8c0916dad013f7c
SHA1

1c89e839f9a9dbafccc88dcb9746a79224328c75
SHA256

b0c5ed33600bb7c9e44608965a284f92289fa4cc2a1c7a423a2687626ce4a3a2
SHA512

274225e824854b52a24e1ba6a43fa49ae33aee102a1e55644f04a74bcf03397699b483e2f6dca228feb6c86084933b43c2ae033798cb3299328bb17f864cdbcf
SSDEEP

768:wqpNqTjYPkDqJHFD5AGvoaycBcG/fVw4yxooloLv:2TjYPmqJHFD5bRycBlHJyxnlSv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a8a11a2873c6a21ae8c0916dad013f7c_JaffaCakes118

Files

a8a11a2873c6a21ae8c0916dad013f7c_JaffaCakes118
.dll windows:4 windows x86 arch:x86

a584ce32d21b10bc33add86f28e5f5f9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetModuleFileNameA
GetTickCount
GetCurrentProcessId
HeapSize
GetSystemTimeAsFileTime
QueryPerformanceCounter
GetCurrentThreadId
GetCommandLineA
GetVersionExA
TlsAlloc
SetLastError
GetLastError
TlsFree
TlsSetValue
TlsGetValue
GetProcAddress
GetModuleHandleA
ExitProcess
TerminateProcess
GetCurrentProcess
HeapFree
HeapAlloc
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
UnhandledExceptionFilter
WriteFile
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetCPInfo
LeaveCriticalSection
EnterCriticalSection
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
RtlUnwind
GetACP
GetOEMCP
VirtualAlloc
HeapReAlloc
InitializeCriticalSection
InterlockedExchange
VirtualQuery
LoadLibraryA
VirtualProtect
GetSystemInfo

user32

SendMessageW
CallNextHookEx
IsWindow
FindWindowA
PostMessageA
GetWindowTextW

Exports

Exports

CallWndProc
KeyboardHookProc
MouseHookProc

Sections

.text
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a584ce32d21b10bc33add86f28e5f5f9

Headers

File Characteristics

Imports

kernel32

user32

Exports

Exports

Sections

.text Size: 24KB - Virtual size: 23KB

.rdata Size: 8KB - Virtual size: 6KB

.data Size: 4KB - Virtual size: 4KB

.rsrc Size: 4KB - Virtual size: 4KB

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 24KB - Virtual size: 23KB

.rdata
Size: 8KB - Virtual size: 6KB

.data
Size: 4KB - Virtual size: 4KB

.rsrc
Size: 4KB - Virtual size: 4KB

.reloc
Size: 4KB - Virtual size: 3KB