c7f0bc891fc8f9a17dfc14335fed0cfd_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

c7f0bc891fc8f9a17dfc14335fed0cfd_JaffaCakes118
Size

207KB
MD5

c7f0bc891fc8f9a17dfc14335fed0cfd
SHA1

be9a2ab9fbdf9e5b6a4ffa7d84319a55275f946e
SHA256

c1dafd1c917b77f5c7c23b344a84c9d1bf5e44426cf19daea9c9b11927551ad6
SHA512

1a503488629d75d2ae8c428f3d4d10a4da7a592b912d6c1d400d004a0812ef37ace6a2a829c68c01fabdddea7e10d658640bc84b02de037e7c901438feeeeb32
SSDEEP

3072:5zBGS7M43DrFDZHA8l1P9qZOzawEpoGboHUC0qW+7af5h90RXKbs5tz:5lNVVAoEZOzahzCY5h97bW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c7f0bc891fc8f9a17dfc14335fed0cfd_JaffaCakes118

Files

c7f0bc891fc8f9a17dfc14335fed0cfd_JaffaCakes118
.exe windows:5 windows x86 arch:x86

c66e43b08426c74df94d06421186320f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

TerminateProcess
IsDebuggerPresent
UnhandledExceptionFilter
GetCurrentProcess
LoadLibraryW
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapFree
Sleep
RtlUnwind
HeapSize
LCMapStringW
MultiByteToWideChar
GetStringTypeW
HeapReAlloc
IsProcessorFeaturePresent
EnterCriticalSection
GetTickCount
HeapCreate
HeapAlloc
GetCommandLineA
HeapSetInformation
GetStartupInfoW
SetUnhandledExceptionFilter
GetProcAddress
GetModuleHandleW
ExitProcess
DecodePointer
WriteFile
GetStdHandle
GetModuleFileNameW
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
GetLastError
InterlockedDecrement
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
VirtualQuery

user32

EndPaint
GetMessageA
SetTimer
GetWindowRect
PostQuitMessage
FillRect
KillTimer
GetClipCursor
GetClientRect
BeginPaint
GetDC
TranslateMessage
OffsetRect
ReleaseDC
DefWindowProcA
GetDesktopWindow
SetWindowPos
GetCaretPos
DispatchMessageA
FindWindowA

gdi32

MoveToEx
SelectClipPath
GetTextExtentPoint32A
SetViewportOrgEx
LineTo
CreateFontIndirectA
DeleteObject
SelectObject
EndPath
EnumFontFamiliesA
Polyline
SetROP2
SetTextAlign
GetStockObject
TextOutA
BeginPath

comdlg32

ChooseFontA

Sections

.text
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 164KB - Virtual size: 167KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c66e43b08426c74df94d06421186320f

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

Sections

.text Size: 23KB - Virtual size: 23KB

.rdata Size: 9KB - Virtual size: 8KB

.data Size: 164KB - Virtual size: 167KB

.rsrc Size: 9KB - Virtual size: 9KB

.text
Size: 23KB - Virtual size: 23KB

.rdata
Size: 9KB - Virtual size: 8KB

.data
Size: 164KB - Virtual size: 167KB

.rsrc
Size: 9KB - Virtual size: 9KB