ae5135162b23f35e2f4784a42cfb7c4e_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

ae5135162b23f35e2f4784a42cfb7c4e_JaffaCakes118
Size

38KB
MD5

ae5135162b23f35e2f4784a42cfb7c4e
SHA1

c8e08108a9e80e8c657ed8482ddedb99f56aa935
SHA256

b5fcefd5d6a0ce71c1802ac0896629fb847ef9c8b55ea20e1b08bc795782b161
SHA512

e87587eee031785ce5c202709ddef8e29fa929d7b4da8464ac7213b26562eada778e6e6804b40ffa380e28ea265b333a0b37513e1a05428e6ab0457105571f9e
SSDEEP

768:n6Ivq4pG6uTBJmOzReFEJIefkcO3eENh1BJFDspWI5wZkB1lZHSF:n1vq4EmWAFghv+ecrBvI+kPli

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ae5135162b23f35e2f4784a42cfb7c4e_JaffaCakes118

Files

ae5135162b23f35e2f4784a42cfb7c4e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

64acc81d1bc89555bc9996c33ab827ca

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DisableThreadLibraryCalls
InterlockedExchange
DosDateTimeToFileTime
Sleep
SetFileApisToOEM
EnterCriticalSection
GetComputerNameA
GetDefaultCommConfigA
GetTempFileNameA
RtlFillMemory
GetVersion
GetLastError
LockResource
BuildCommDCBAndTimeoutsA
VDMOperationStarted
VirtualProtect
GetWindowsDirectoryW
SetLastError
GetTimeZoneInformation
GetSystemTime
OpenEventW
HeapAlloc
SetFileApisToANSI
SetConsoleActiveScreenBuffer
TransmitCommChar
EnumTimeFormatsA
EnumLanguageGroupLocalesW
SetTimeZoneInformation

user32

InsertMenuItemW
EnumDisplayMonitors
DdeCmpStringHandles
SetKeyboardState
RealChildWindowFromPoint
GetDlgItemTextA
InitializeWin32EntryTable
DrawEdge
CliImmSetHotKey
GetTabbedTextExtentA
DestroyMenu
IMPSetIMEW
ChangeDisplaySettingsExA
SetMessageQueue
RegisterDeviceNotificationA
GetMessageA
ToAsciiEx
GetUpdateRgn
InsertMenuW
IMPGetIMEA
ToUnicode
CreateWindowExW
OpenDesktopW
GetKBCodePage
CheckMenuItem

gdi32

XFORMOBJ_bApplyXform
GetTextExtentExPointI
EngLoadModule
EqualRgn
RemoveFontResourceA
SetBoundsRect
GetGlyphIndicesW
GdiAddFontResourceW
StartDocA
SetPixelV
GetCharABCWidthsA
GetLayout
EnumFontFamiliesExA
AngleArc
GetMapMode
SetWindowExtEx
CreateColorSpaceW
GetMetaFileW
EngPlgBlt
GetFontAssocStatus
GdiAlphaBlend
ResetDCW
FloodFill
SetViewportOrgEx
GetColorSpace
gdiPlaySpoolStream
FONTOBJ_cGetAllGlyphHandles
GdiGetSpoolMessage
CreatePatternBrush
GetBitmapBits
MoveToEx

comdlg32

PageSetupDlgA
ChooseColorW
GetOpenFileNameW
LoadAlterBitmap
PrintDlgW
PrintDlgExW
CommDlgExtendedError
PrintDlgExA
dwOKSubclass
PageSetupDlgW
FindTextW
GetOpenFileNameA
dwLBSubclass
GetFileTitleW

Sections

.text
Size: 4KB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 30KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

64acc81d1bc89555bc9996c33ab827ca

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

Sections

.text Size: 4KB - Virtual size: 1.0MB

.data Size: 30KB - Virtual size: 32KB

.idata Size: 3KB - Virtual size: 4KB

.text
Size: 4KB - Virtual size: 1.0MB

.data
Size: 30KB - Virtual size: 32KB

.idata
Size: 3KB - Virtual size: 4KB