ad9f452260479291f53d1dadea0a288b_JaffaCakes118

General

Target

ad9f452260479291f53d1dadea0a288b_JaffaCakes118
Size

18KB
MD5

ad9f452260479291f53d1dadea0a288b
SHA1

55774f47f349e75aa921b884d4a8437404e65b6b
SHA256

a198f12fa843869d0508fce396802e5f0d8d76b97f9d8d83ba2502b8f634b09f
SHA512

b9048b8a62f4f3eec27550407ce32837baef5850bfb02c9c9544e37de8c38f66cab82875339314815d189928acf58e079cd266e5d22ac24cbde764a303c4495f
SSDEEP

48:q2IsmSHGbBJGUbyLBS8CUtiQagVIKYpzGAEExYOQChilXR:4HSHGbBJYLsKtnIOxZChiFR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ad9f452260479291f53d1dadea0a288b_JaffaCakes118

Files

ad9f452260479291f53d1dadea0a288b_JaffaCakes118
.exe windows:5 windows x86 arch:x86

b2c23389bbc49e5dbf936a6c5c6e6c18

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
ReadFile
SetFilePointer
GetFileSize
CreateFileA
Sleep
GetCurrentProcess
GetCurrentProcessId
WriteFile
GetCommandLineA
GetLastError
HeapFree
MultiByteToWideChar
VirtualFree
WideCharToMultiByte
lstrcmpA
GetProcessHeap
CreateThread
lstrlenA
lstrcpyA
GetVersionExA
GetExitCodeProcess
SetNamedPipeHandleState
DuplicateHandle
CreatePipe
lstrlenW
GetLocalTime
CreateDirectoryA
ReleaseMutex
WaitForSingleObject
TerminateThread
GetExitCodeThread
DeleteFileA
CreateMutexA
lstrcmpiA
GetStartupInfoA
GetEnvironmentVariableA
lstrcatA
GetModuleHandleA
VirtualAllocEx
TerminateProcess
CloseHandle
SetThreadContext
ResumeThread
ExitProcess
LoadLibraryA
GetThreadContext

user32

DispatchMessageA
TranslateMessage
GetMessageA
PeekMessageA
EnumWindows
GetForegroundWindow
IsWindowVisible
GetDesktopWindow
GetWindowRect
GetWindowDC
ReleaseDC
wsprintfA
SetForegroundWindow
SetWindowTextA
ShowWindow
SendMessageA
GetActiveWindow

gdi32

GetDeviceCaps
SelectObject
DeleteObject
SetStretchBltMode
StretchBlt
CreateCompatibleDC
CreateDIBSection
DeleteDC

Sections

.text
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

b2c23389bbc49e5dbf936a6c5c6e6c18

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

Sections

.text Size: 14KB - Virtual size: 13KB

.rdata Size: 3KB - Virtual size: 2KB

.data Size: 512B - Virtual size: 6KB

.text
Size: 14KB - Virtual size: 13KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 512B - Virtual size: 6KB