bc039236b7abbb240a7a624e7e22f564_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

bc039236b7abbb240a7a624e7e22f564_JaffaCakes118
Size

91KB
MD5

bc039236b7abbb240a7a624e7e22f564
SHA1

3bbc41300eba6d6fd4f3de17b1fbc2b769da59f7
SHA256

709204df9cefbe5922145819f96235128fed20af2f4b6e7e64f690db0f88b937
SHA512

bf090be40fff4b15b206f697db40051cd7aafd278de4f190d6cb96c45d53d99839e34d1e7d1ff0fe8043993000a4f3674763a1a2c374167aca0deb307e142300
SSDEEP

1536:XxjfKDY+UIyz1FOv+Lohbm32eq5cmYnAQCq/RtLpSk/zxJY1Z0r1/VaZ7h0:hjL+RyhF4+LoHeoJIRqk/znYEVq90

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bc039236b7abbb240a7a624e7e22f564_JaffaCakes118

Files

bc039236b7abbb240a7a624e7e22f564_JaffaCakes118
.exe windows:5 windows x86 arch:x86

83c243460accac281510106fd9f4166f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ntdll

RtlUnwind

gdiplus

GdipSaveGraphics
GdiplusStartup
GdipCreateLineBrush
GdipCreateBitmapFromFile
GdipIsClipEmpty
GdiplusShutdown
GdipAlloc
GdipAddPathClosedCurve
GdipCreateBitmapFromStream
GdipGetClipBounds
GdipGetLogFontA
GdipFree

kernel32

LocalFree
DeleteCriticalSection
GetLocalTime
EnterCriticalSection
GetLastError
InterlockedExchange
GetACP
CompareStringW
LocalReAlloc
MulDiv
LeaveCriticalSection
Sleep
InitializeCriticalSection
GetSystemTimes
WaitForSingleObject
GetFileAttributesA
ReadFile
FindFirstFileA
SetFileAttributesA
GetFileType
FindNextFileA
HeapReAlloc
HeapAlloc
ExitProcess
GetModuleHandleW
HeapFree
QueryPerformanceCounter

user32

EndPaint
BeginPaint
TranslateMessage
PeekMessageA

advapi32

RegOpenKeyA
OpenProcessToken

msvcrt

memset

Exports

Exports

_BangBangBang@4
_OpenDialog@8
_WindowsControl@4

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_winoc
Size: 512B - Virtual size: 232B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

83c243460accac281510106fd9f4166f

Headers

DLL Characteristics

File Characteristics

Imports

ntdll

gdiplus

kernel32

user32

advapi32

msvcrt

Exports

Exports

Sections

.text Size: 6KB - Virtual size: 6KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: - Virtual size: 160B

.pdata Size: 512B - Virtual size: 512B

.rsrc Size: 80KB - Virtual size: 80KB

_winoc Size: 512B - Virtual size: 232B

.text
Size: 6KB - Virtual size: 6KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: - Virtual size: 160B

.pdata
Size: 512B - Virtual size: 512B

.rsrc
Size: 80KB - Virtual size: 80KB

_winoc
Size: 512B - Virtual size: 232B