c94286dad980835b38cb356ed2b8e22a_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

c94286dad980835b38cb356ed2b8e22a_JaffaCakes118
Size

31KB
MD5

c94286dad980835b38cb356ed2b8e22a
SHA1

d4e9984843bede04a07a913552c62709b05cf6f6
SHA256

c5da778ccd8418e99a1edee51b48cbfef3c60749bffea67ea8587ea93135828d
SHA512

1d8937b5c1099cbc9547b6c45d90d2048699a41801c0d5f966b9a450bfe3c21e0d6d20eb3fff873359d7d4884e2c9d7c9b86781221295f86b22b71b7214e80cf
SSDEEP

384:26K/O/vQMprbLk738UD09w6kolkxi5lRwZ3xkET+WnhVh9IsOMFMmyKJ2:s/OAeg7tD06jlMlRkkq+EH6MF/yKJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c94286dad980835b38cb356ed2b8e22a_JaffaCakes118

Files

c94286dad980835b38cb356ed2b8e22a_JaffaCakes118
.exe windows:5 windows x86 arch:x86

6e318180fe6b8e7438d6d0c313d31cfe

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LZRead
DuplicateHandle
ClearCommBreak
SetHandleContext
GetThreadSelectorEntry
GetDllDirectoryA
ReleaseSemaphore
SetFileAttributesA
VirtualAllocEx
GlobalDeleteAtom
GetSystemWindowsDirectoryA
GetProcessWorkingSetSize
GetTickCount
IsBadCodePtr
GetVolumePathNameA
BuildCommDCBAndTimeoutsA
PulseEvent
SetConsoleCP
OpenWaitableTimerA
FatalExit
GetEnvironmentStringsA
GetFileAttributesExA
ReadConsoleA
GetVersion
SetVolumeMountPointA
GetThreadPriorityBoost
CreateSemaphoreA
GetSystemDefaultLCID
HeapSize
GetConsoleCursorInfo
SetProcessShutdownParameters
IsBadWritePtr
HeapReAlloc
WaitForMultipleObjectsEx
SetVolumeLabelA
GlobalDeleteAtom
GetFileSize
OpenJobObjectA
GetProcessShutdownParameters
FreeEnvironmentStringsA
LocalHandle
GetPrivateProfileStructA
SetLocalTime
GlobalLock
_lopen
WriteConsoleOutputCharacterW
SetFileAttributesA
HeapDestroy
ResetEvent
LZOpenFileA
GetCurrentDirectoryA
GlobalFindAtomA
EnumTimeFormatsA
OutputDebugStringA
GetConsoleScreenBufferInfo
GetFileSizeEx
GlobalFree
GetPrivateProfileSectionNamesA
GetDefaultCommConfigA
GetFileTime
GetDateFormatA
DeleteTimerQueueTimer
GetConsoleCharType
GetThreadPriority
LocalSize
GetPrivateProfileSectionNamesA
SetConsoleLocalEUDC
GetCPInfoExA
WriteFile
ClearCommError
MulDiv
GetDefaultCommConfigA
FindResourceExA
CreateDirectoryExW
GlobalSize
CloseConsoleHandle
Heap32ListFirst
GetLogicalDrives
WriteConsoleInputA
DefineDosDeviceA
UnlockFile
GetLastError

user32

MonitorFromWindow
ScrollChildren
LoadCursorA
ExitWindowsEx
GetKeyNameTextA
DrawFrameControl
FreeDDElParam
SystemParametersInfoA
GetSysColorBrush
DefFrameProcA
CreateDialogIndirectParamA
SetProcessWindowStation
GetWindowTextA
GetIconInfo
ScrollWindow
BroadcastSystemMessageExA
RegisterClassExA
SetPropA
GetClipboardFormatNameA
ToUnicode
SetParent
GetUpdateRgn
GetWindowTextA
PrivateExtractIconsA
UnhookWinEvent
GetWindowContextHelpId
OemToCharBuffA
IsWindowInDestroy
SetLayeredWindowAttributes
AnimateWindow
CharUpperBuffW
RegisterClipboardFormatA
CreateIcon
GetDlgItemTextA
InvalidateRgn
BringWindowToTop
RegisterShellHookWindow
IsCharUpperA

version

GetFileVersionInfoA

comdlg32

GetFileTitleA

Sections

.text
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6e318180fe6b8e7438d6d0c313d31cfe

Headers

File Characteristics

Imports

kernel32

user32

version

comdlg32

Sections

.text Size: 25KB - Virtual size: 24KB

.idata Size: 3KB - Virtual size: 31KB

.rsrc Size: 2KB - Virtual size: 2KB

.text
Size: 25KB - Virtual size: 24KB

.idata
Size: 3KB - Virtual size: 31KB

.rsrc
Size: 2KB - Virtual size: 2KB