a555997b50022f0aa19de245a046f5c9_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

a555997b50022f0aa19de245a046f5c9_JaffaCakes118
Size

124KB
MD5

a555997b50022f0aa19de245a046f5c9
SHA1

fbfd81c384fdb3121f56d07dcf43fb686ea73ec4
SHA256

4e2fdeb7935c18c79d5e2e960f20cb4da13f8b6a44f52bb8f08c569e02a9ccd7
SHA512

08fed069a6d96a921fe6f549e9d6f23b9000f63ae8a63f69d940e4e43e27699964096aff2bc083f19f4e5a729ce07bf134d8358343cce7d317658a6c8c707c8d
SSDEEP

3072:HhypO5LNWe6b/2Dpf21Fnt9NBlN7Y2K7LNi5EOkaZ27g9:HNWe6mGFnttkF7xENkN7a

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a555997b50022f0aa19de245a046f5c9_JaffaCakes118

Files

a555997b50022f0aa19de245a046f5c9_JaffaCakes118
.exe windows:1 windows x86 arch:x86

893267cf20aaf62017cb36e61e08b69f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetConsoleOutputCP
SetLastError
SetThreadAffinityMask
DeleteFileA
GetStartupInfoA
WaitForMultipleObjects
CreateFileMappingA
GetLocaleInfoA
InterlockedExchange
LockResource
GetEnvironmentStringsW
HeapSize
GetProcAddress
GetProcessWorkingSetSize
GetThreadContext
Module32Next
WideCharToMultiByte
IsDebuggerPresent
GetModuleFileNameA
GetComputerNameW
GetExitCodeThread
GetSystemTimeAsFileTime
LoadLibraryA
FileTimeToSystemTime
GetStdHandle
CreateEventA
WaitForSingleObject
SetPriorityClass
SearchPathA
GetOEMCP
GetStringTypeW
GetModuleHandleA
LCMapStringW
CloseHandle
SetEndOfFile

user32

GetClassLongA
GetSysColor
ClientToScreen
DestroyWindow
KillTimer
DialogBoxIndirectParamA
wsprintfA
DeleteMenu
LoadAcceleratorsA
UnionRect
DispatchMessageA
SetWindowTextA
ScreenToClient
EnumChildWindows
SetClipboardData
EnumWindows
GetDlgItem
GetFocus
AppendMenuA
DestroyIcon
BeginDeferWindowPos
GetSystemMetrics
GetClientRect
SystemParametersInfoA
GetClassNameA
GetCapture
DrawFrameControl
InvalidateRect
DrawEdge
SetWindowLongA
CreateMenu
GetDlgCtrlID
SetWindowPlacement
EndDeferWindowPos

msvcrt

__p__fmode
__setusermatherr
_exit
_adjust_fdiv
exit
_except_handler3
_XcptFilter
__set_app_type
__getmainargs
memcpy
_controlfp
_initterm
__p__commode
_acmdln

Sections

.text
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 128KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 95KB - Virtual size: 94KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

893267cf20aaf62017cb36e61e08b69f

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

msvcrt

Sections

.text Size: 22KB - Virtual size: 22KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 2KB - Virtual size: 128KB

.rsrc Size: 95KB - Virtual size: 94KB

.text
Size: 22KB - Virtual size: 22KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 2KB - Virtual size: 128KB

.rsrc
Size: 95KB - Virtual size: 94KB