b4a3ba05c43b456ea6734cc4c2980734_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

b4a3ba05c43b456ea6734cc4c2980734_JaffaCakes118
Size

105KB
MD5

b4a3ba05c43b456ea6734cc4c2980734
SHA1

7822f1e8cfc0c2729ff96fd677bd71d021adabf4
SHA256

9f01d9a71519699d8086ee86410e5e671894285c22510c78d84f560eb94226c9
SHA512

decf391b25a4d04ccf2b3ed8199a387ead501dfdc11430bbae164db48fee7fee7520e8e0b29b1e1279710244a0986c6ea205628bb474604fec5c7cf2686a79fb
SSDEEP

1536:HzDm2fTeTh54qvK5HSB3/yIcOm3T0sxU7e0ESfXm2nut6JkpC7SOUHdjzr4k:HzxfTez4Knt6IT5Z3rup9YSfjA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b4a3ba05c43b456ea6734cc4c2980734_JaffaCakes118

Files

b4a3ba05c43b456ea6734cc4c2980734_JaffaCakes118
.exe windows:5 windows x86 arch:x86

4ef78af323d03ede2fc9c2f2b705a641

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

LoadCursorA
ChangeDisplaySettingsA
AdjustWindowRect
SetCursor
DestroyWindow
PostQuitMessage
SetCursorPos
GetCursorPos
ClientToScreen
DrawTextA
GetAsyncKeyState
LoadImageA
wsprintfA
BeginPaint
EndPaint
MessageBoxA
ReleaseDC
DefWindowProcA
RegisterClassA
CreateWindowExA
UpdateWindow
GetDC
GetMessageA
PeekMessageA
TranslateMessage
DispatchMessageA
SetWindowTextA
SetWindowLongA
SetWindowPos

kernel32

SetFilePointer
IsValidCodePage
GetOEMCP
GetACP
GetConsoleCP
Sleep
TerminateProcess
GetCurrentProcess
GetModuleHandleA
GetConsoleMode
LoadLibraryW
SetStdHandle
FlushFileBuffers
MultiByteToWideChar
ReadFile
CreateFileA
LCMapStringW
GetStringTypeW
HeapReAlloc
RaiseException
WriteConsoleW
HeapSize
SetEndOfFile
GetProcessHeap
GetCPInfo
GetCommandLineA
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetEnvironmentStringsW
WideCharToMultiByte
FreeEnvironmentStringsW
GetModuleFileNameA
GetSystemTimeAsFileTime
HeapAlloc
GetLastError
HeapFree
CreateFileW
HeapSetInformation
GetStartupInfoW
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
DecodePointer
TlsFree
InterlockedIncrement
GetModuleHandleW
SetLastError
GetCurrentThreadId
InterlockedDecrement
GetProcAddress
IsProcessorFeaturePresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameW
HeapCreate
CloseHandle
EnterCriticalSection
LeaveCriticalSection
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
RtlUnwind

gdi32

SetTextColor
TextOutA
CreateFontA
GetPixel
SetBkColor
CreateBitmap
PlgBlt
CreateDIBSection
BitBlt
CreateCompatibleDC
GetObjectA
CreateCompatibleBitmap
StretchBlt
DeleteDC
CreatePen
Rectangle
CreateSolidBrush
SelectObject
PatBlt
DeleteObject
SetPixel
GetStockObject
SetStretchBltMode
SetBkMode

msimg32

AlphaBlend

winmm

timeEndPeriod
timeBeginPeriod
sndPlaySoundA
joyGetPos
mciSendStringA

Sections

.text
Size: 77KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4ef78af323d03ede2fc9c2f2b705a641

Headers

DLL Characteristics

File Characteristics

Imports

user32

kernel32

gdi32

msimg32

winmm

Sections

.text Size: 77KB - Virtual size: 76KB

.rdata Size: 15KB - Virtual size: 15KB

.data Size: 5KB - Virtual size: 16KB

.reloc Size: 6KB - Virtual size: 5KB

.text
Size: 77KB - Virtual size: 76KB

.rdata
Size: 15KB - Virtual size: 15KB

.data
Size: 5KB - Virtual size: 16KB

.reloc
Size: 6KB - Virtual size: 5KB