ae51c32e7f2c15ab3499826f5ead72a4_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

ae51c32e7f2c15ab3499826f5ead72a4_JaffaCakes118
Size

201KB
MD5

ae51c32e7f2c15ab3499826f5ead72a4
SHA1

f98788da865be38e8692f8086ddb085918176db7
SHA256

4fa6c970495136b00561a2b8b3023beaa70502ececf258f5b18766a031098d93
SHA512

019e448b5aa8ec8a491e03f8bb7c78c9f9a431d6467e8162f0848e87c3be0c5545dfa34baedeabc1ca0716231a0311420e7541fa255cf77894c29ee0d59e34c5
SSDEEP

3072:pP/vjqD31pqtOZGMneT5+t3r++J/aSWxuM1d6JdRIN12W8tD8FTpTLimttNwZHVz:l/7yktOZoTUV7YCRI/YtIqmttCZQRY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ae51c32e7f2c15ab3499826f5ead72a4_JaffaCakes118

Files

ae51c32e7f2c15ab3499826f5ead72a4_JaffaCakes118
.dll windows:4 windows x86 arch:x86

49791ccf29aaf3d1312435e0714ecfbe

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

comctl32

ImageList_Read
ImageList_Remove
ImageList_Add
ImageList_Create

kernel32

HeapFree
LocalReAlloc
GetCurrentProcess
HeapAlloc
VirtualAllocEx
SetEvent
MoveFileExA
GetModuleHandleW
ExitProcess
GetUserDefaultLCID
LocalFree
lstrlenW
LoadLibraryA
GetCurrentThread
ExitThread
EnumCalendarInfoA
lstrcmpiA
GetLastError
GetStringTypeW
GetDiskFreeSpaceA
WideCharToMultiByte
MoveFileA
GlobalDeleteAtom
GetSystemDefaultLangID

user32

MsgWaitForMultipleObjects
GetWindow
ShowWindow
IsCharLowerA
IsIconic
IsCharUpperA
DefWindowProcA
DrawFrameControl
IsDlgButtonChecked
InvalidateRect
SetMenuItemInfoA
UnregisterClassA
IsWindowEnabled
GetKeyboardLayout
GetClassLongA
GetDesktopWindow
GetCursor
TrackPopupMenu
SetParent
GetActiveWindow
MessageBoxA
AdjustWindowRectEx
ClientToScreen
GetDC
GetWindowLongA
DestroyCursor
GetMenuStringA
EnableWindow
IsDialogMessageA
GetFocus
PostQuitMessage
InsertMenuItemA
GetScrollPos
SetCapture
SetWindowPlacement
EnumThreadWindows
MoveWindow
DrawEdge
RegisterWindowMessageA
GetLastActivePopup
DestroyIcon
PeekMessageA
EqualRect
FrameRect
GetMenu
GetMenuItemCount
GetKeyboardLayoutList
GetClientRect
SetMenu
CharUpperA
SetForegroundWindow
GetMenuState
DestroyWindow
LoadIconA
DrawIconEx
SetWindowLongA
GetWindowDC
InsertMenuA
CreateIcon
GetMenuItemInfoA
DispatchMessageA

gdi32

CreateDIBitmap
CreateBrushIndirect

Exports

Exports

_oAXZX0@12

Sections

.text
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 152KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 147KB - Virtual size: 147KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.badata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

49791ccf29aaf3d1312435e0714ecfbe

Headers

File Characteristics

Imports

comctl32

kernel32

user32

gdi32

Exports

Exports

Sections

.text Size: 19KB - Virtual size: 19KB

.rdata Size: 9KB - Virtual size: 152KB

.data Size: 147KB - Virtual size: 147KB

.edata Size: 4KB - Virtual size: 3KB

.badata Size: 2KB - Virtual size: 1KB

.rsrc Size: 14KB - Virtual size: 13KB

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 19KB - Virtual size: 19KB

.rdata
Size: 9KB - Virtual size: 152KB

.data
Size: 147KB - Virtual size: 147KB

.edata
Size: 4KB - Virtual size: 3KB

.badata
Size: 2KB - Virtual size: 1KB

.rsrc
Size: 14KB - Virtual size: 13KB

.reloc
Size: 4KB - Virtual size: 3KB