c7b4de6f5fb5db3875c4043b34b72843_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

c7b4de6f5fb5db3875c4043b34b72843_JaffaCakes118
Size

23KB
MD5

c7b4de6f5fb5db3875c4043b34b72843
SHA1

55ca17db19a748761e4c1195d590d5d0d8b300dc
SHA256

a5d5d85e741598df14c34b85c79803557a19d923e7b8717c666522faa6e97630
SHA512

76fa62bb91dd9247250e382159f032595783aaa89a35585e63505514f0e5756e3c11ae32e52c9af69b08a3f64e256057671be5daeb8f363676ba13288c8e659f
SSDEEP

384:NXmbXps3MeOKG6uy7lLV0W16cBhlPfgaixacbLwEehkzHTV:0KptBlLWBcBhl4a3Ee2HR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c7b4de6f5fb5db3875c4043b34b72843_JaffaCakes118

Files

c7b4de6f5fb5db3875c4043b34b72843_JaffaCakes118
.exe windows:5 windows x86 arch:x86

665a6eb18f999792fd639376772623cc

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetTickCount
CloseHandle
CloseHandle
lstrlenA
CreateThread
CloseHandle
QueryPerformanceCounter
GetLastError
GetCurrentThreadId
GetCurrentThreadId
GetProcAddress
GetTickCount
EnterCriticalSection
GetLastError
HeapFree
EnterCriticalSection
GetModuleHandleW
GetProcessHeap
GetVersionExA
GetSystemTimeAsFileTime
InterlockedIncrement
GetProcessHeap
CreateThread
lstrcmpiW
GetCurrentProcess
ReadFile
GetModuleFileNameA
GetSystemTimeAsFileTime
GetTickCount
GetModuleFileNameA
GetProcessHeap
LeaveCriticalSection
GetCurrentProcessId
InterlockedIncrement
FreeLibrary
GetVersionExA
LocalFree
DeleteCriticalSection
CloseHandle
GetModuleFileNameA
CloseHandle
HeapDestroy
EnterCriticalSection
InterlockedExchange
CreateThread
InterlockedIncrement
GetLastError
lstrlenA
InterlockedCompareExchange
CreateFileW
DeleteCriticalSection
CloseHandle
GetModuleFileNameW
LoadLibraryA
GetModuleFileNameA
VirtualAlloc

user32

MessageBoxW
wsprintfA
LoadIconW
SetFocus
SetWindowTextW
SendMessageW
SetFocus
SetFocus
CharNextW
EndDialog
SetCursor
BeginPaint
SetDlgItemTextW
CharNextW
LoadCursorW
MessageBoxW
GetFocus
SetWindowTextW
EnableWindow
EndDialog
GetSysColor
LoadCursorW
DestroyWindow
SetFocus
LoadStringW
SetCursor
TranslateMessage
SetWindowPos
GetDlgItem
IsDlgButtonChecked
SetWindowLongW
CreateWindowExW
GetDesktopWindow
LoadStringW
wsprintfA
GetDC
MessageBoxW
EnableWindow
EndDialog
GetWindowLongW
CreateWindowExW
SetForegroundWindow
LoadStringW
DialogBoxParamW
PostQuitMessage
SetCursor
LoadCursorW
IsDlgButtonChecked
SetCursor
DefWindowProcW
CreateWindowExW
GetDesktopWindow
DispatchMessageW
ShowWindow
SetFocus
GetDC
CharNextW

Sections

.text
Size: 18KB - Virtual size: 20KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

665a6eb18f999792fd639376772623cc

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

Sections

.text Size: 18KB - Virtual size: 20KB

.data Size: 512B - Virtual size: 4KB

.rdata Size: 3KB - Virtual size: 4KB

.rsrc Size: 1024B - Virtual size: 4KB

.text
Size: 18KB - Virtual size: 20KB

.data
Size: 512B - Virtual size: 4KB

.rdata
Size: 3KB - Virtual size: 4KB

.rsrc
Size: 1024B - Virtual size: 4KB