a78a105de0a140e54ee8839c054962de_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

a78a105de0a140e54ee8839c054962de_JaffaCakes118
Size

165KB
MD5

a78a105de0a140e54ee8839c054962de
SHA1

d981895b95f40e073e0ec3b204597b96b23bc749
SHA256

38439e2825af1784260dc678a903f9e5000dfe59fabdf35c55a5aef85aace818
SHA512

0fd24036db8ccafba5506dc08a8053943c91bd0bc5b5075e7e9171281b858da46b2471e5fac72ab58d853d5d144b8c92cbd87e46115080bdea6d92c9e620124e
SSDEEP

3072:KGF4h+5jcPiG8QDCII4Ss8RUwFTeWsXNYpkJqsPFPaCDzvaEs:lFxBcH8QDCII5s2JFTeWMNYpkRPECvv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a78a105de0a140e54ee8839c054962de_JaffaCakes118

Files

a78a105de0a140e54ee8839c054962de_JaffaCakes118
.dll windows:4 windows x86 arch:x86

0580d0573098b9f5628418e96f3650a6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

ole32

CoCreateFreeThreadedMarshaler
CoDisconnectObject
CLSIDFromString
CoGetMalloc
CoCreateInstanceEx
ReleaseStgMedium

kernel32

WriteFile
VirtualQuery
VirtualAllocEx
WaitForSingleObject
ExitProcess
GetCommandLineA
LoadLibraryA

user32

MapWindowPoints
GetWindowThreadProcessId
IsWindowVisible
CheckMenuItem
LoadKeyboardLayoutA
GetCursor
RegisterWindowMessageA
GetWindowTextLengthA
DestroyCursor
CreateWindowExA
EmptyClipboard
RemovePropA
GetMessagePos
OemToCharA
EnumChildWindows
TranslateMDISysAccel
CharNextA
LoadBitmapA
SendMessageA
InflateRect
GetMenuItemInfoA
SetWindowLongA
IsCharLowerA
FrameRect
SetParent
GetWindowDC
IsRectEmpty
GetKeyNameTextA
ScrollWindow
MoveWindow
GetForegroundWindow
GetScrollPos
IsChild
OffsetRect
SetTimer
GetDesktopWindow
ReleaseCapture
GetMenuStringA
GetMenu
GetDCEx
DispatchMessageW
DestroyMenu
CreatePopupMenu
GetSysColor
ScreenToClient
SendMessageW
DrawEdge
InsertMenuItemA
CharNextW
GetWindowLongW
PeekMessageA
DefWindowProcA
GetIconInfo
TrackPopupMenu
CharUpperA
GetParent
DrawIcon
PostMessageA
DrawIconEx
UnregisterClassA
IsDlgButtonChecked
GetWindow
GetMenuState
DrawMenuBar
IsIconic
AdjustWindowRectEx
SystemParametersInfoA
GetKeyboardLayoutList
EnableWindow
InvalidateRect
GetKeyboardType
WaitMessage
EnableMenuItem
SetWindowLongW

gdi32

GetBkColor

Exports

Exports

_dkJWu_0qCcXK@8
_N90S81
uNzftfgD
_lcipu9BJgwH0
1Fu4Z@12
_HOaXxDUvqUUV@24
Ovv8wG
iM4ntG6Sln
KW2V4wqwQwdkfT@8
VMlVYQ@8
_YrGPe8
HswM2f6kQRSAO@12
cJIx7RU
_WU4zfree@24
g3JAXtceYH4B@4
Y3Vo8nPoI7KF3c
0ZE6Rr@20
_Dn6JP0t8q@12
_vdlPcvsm@12
_N3SHBZi@16
_cSXm6VuFlQBWHU
_tqHO08JUzuZwHK@8
_U41zzsVdra2kQ
_IzeRD4
VwUSVQ0UFecgz@24
_APzUrAnx@4
_Lxf0c@8
oCDyvp0KRqo

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 159KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 148KB - Virtual size: 147KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0580d0573098b9f5628418e96f3650a6

Headers

File Characteristics

Imports

ole32

kernel32

user32

gdi32

Exports

Exports

Sections

.text Size: 8KB - Virtual size: 8KB

.rdata Size: 3KB - Virtual size: 159KB

.data Size: 148KB - Virtual size: 147KB

.rsrc Size: 2KB - Virtual size: 1KB

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 8KB - Virtual size: 8KB

.rdata
Size: 3KB - Virtual size: 159KB

.data
Size: 148KB - Virtual size: 147KB

.rsrc
Size: 2KB - Virtual size: 1KB

.reloc
Size: 2KB - Virtual size: 1KB