befd68593a7a7ba490601ab145bd00f0_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

befd68593a7a7ba490601ab145bd00f0_JaffaCakes118
Size

129KB
MD5

befd68593a7a7ba490601ab145bd00f0
SHA1

3851c18ddd1cbd8102398c3a6e6e598ce4315d82
SHA256

d88ee231b045db3152a27f397b145bace13f3b281d5fdd371bb02285617b3396
SHA512

d390164a13fdff0b71f9466782e268d10f4231459680ed094f6d1c8083c32703e4d111e2628895c7b2a91e5f06191a4d8b6c72d97f3a67041de0bb7f78df4724
SSDEEP

3072:kpSBqcCuZld8h5PJrTkCxDCerceXTJEmPIu38ywd:Dqh4ld8hRtkCxdceXdIu3Qd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
befd68593a7a7ba490601ab145bd00f0_JaffaCakes118

Files

befd68593a7a7ba490601ab145bd00f0_JaffaCakes118
.exe windows:5 windows x86 arch:x86

6f4a9559292545f8932fd3a3030863c8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

SetWinMetaFileBits
GetEnhMetaFileBits
SetMapperFlags
GetObjectA
SetBkMode
CreateRectRgn
GetBkColor
GdiComment
Pie
GetBitmapBits

kernel32

MapViewOfFile
LeaveCriticalSection
InterlockedDecrement
UnmapViewOfFile
GetLocalTime
EnterCriticalSection
InitializeCriticalSection
OpenFile
GlobalFree
GlobalSize
IsProcessorFeaturePresent
SetHandleCount
GetSystemTimeAsFileTime
InterlockedIncrement
GetCurrentThreadId
WaitForMultipleObjects
VirtualQueryEx
IsDBCSLeadByte
GetProcAddress
LocalFileTimeToFileTime
CreateFileMappingA
SetFilePointer
GlobalAlloc
LoadLibraryA
ReadFile
GetModuleHandleA
DeleteCriticalSection
GetSystemTime

cmpbidq

SdbGetStandardDatabaseGUID
PickIconDlg
DllUnregisterServer
ImmIMPQueryIMEA
ImmRegisterWordA
ImmLoadIME
ILClone
ImmGetConversionListA
ImmTranslateMessage
SdbGetTagFromTagID
ImmReleaseContext
SdbOpenApphelpDetailsDatabaseSP
ExtractIconExA
SdbReadStringTagRef
ILRemoveLastID
DAD_DragMove

ole32

StgIsStorageFile
OleGetIconOfClass
WriteFmtUserTypeStg
CoFileTimeNow
OleCreateFromFile
CreateStreamOnHGlobal
OleIsRunning

msvcrt

_c_exit
__p__commode
_chdir
_except_handler3

advapi32

GetSecurityDescriptorDacl
GetPrivateObjectSecurity

user32

UnpackDDElParam
SetForegroundWindow
SetScrollInfo
DestroyCaret
SetWindowTextA
FreeDDElParam
SetWindowPos
GetQueueStatus
FlashWindow
InflateRect
CharUpperA
BeginDeferWindowPos

Sections

.text
Size: 96KB - Virtual size: 100KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 31KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6f4a9559292545f8932fd3a3030863c8

Headers

DLL Characteristics

File Characteristics

Imports

gdi32

kernel32

cmpbidq

ole32

msvcrt

advapi32

user32

Sections

.text Size: 96KB - Virtual size: 100KB

.rdata Size: 2KB - Virtual size: 4KB

.data Size: 31KB - Virtual size: 32KB

.rsrc Size: 3KB - Virtual size: 4KB

.text
Size: 96KB - Virtual size: 100KB

.rdata
Size: 2KB - Virtual size: 4KB

.data
Size: 31KB - Virtual size: 32KB

.rsrc
Size: 3KB - Virtual size: 4KB