d0503fd28d48a0c7d3b5fafb78597535_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

d0503fd28d48a0c7d3b5fafb78597535_JaffaCakes118
Size

1.1MB
MD5

d0503fd28d48a0c7d3b5fafb78597535
SHA1

8b7737764bc67f6091057bd62b893f440ddc3d35
SHA256

ddeb487d60b41be2f095dc43853885b8a616068f92839c882c717da7881e57c7
SHA512

556f7cacc9df88c46a193246b4d3a777e2a429ebc64b2f17ce888447489ec143bea1d95fce8fdcce411a9dcc5f0375190a8ad90c747efd5da91fde6e21cff382
SSDEEP

24576:q0UD0lCL51N/0/lP2iJiEM6nI6/08cAB4fYaDp93II3Tn0Q7IOItCQ0VA1EVuVTl:q0UD0lCL51N/0/lP2iJiEM6nI6/08cvY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d0503fd28d48a0c7d3b5fafb78597535_JaffaCakes118

Files

d0503fd28d48a0c7d3b5fafb78597535_JaffaCakes118
.exe windows:5 windows x86 arch:x86

4075ebf74b25efa9a87ec5f21609e1f9

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
RaiseException
GetProcAddress
LoadLibraryA
InterlockedExchange
CloseHandle
WriteConsoleW
EncodePointer
DecodePointer
GetLastError
HeapFree
HeapAlloc
GetSystemTimeAsFileTime
RtlUnwind
GetCommandLineW
InterlockedDecrement
ExitProcess
GetModuleHandleExW
AreFileApisANSI
MultiByteToWideChar
HeapSize
Sleep
InterlockedIncrement
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
WideCharToMultiByte
SetLastError
GetCurrentThread
GetCurrentThreadId
GetProcessHeap
GetStdHandle
WriteFile
GetModuleFileNameW
HeapReAlloc
IsDebuggerPresent
IsProcessorFeaturePresent
GetFileType
DeleteCriticalSection
GetStartupInfoW
QueryPerformanceCounter
GetCurrentProcessId
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
CreateSemaphoreW
FatalAppExitA
FreeLibrary
LoadLibraryExW
SetConsoleCtrlHandler
GetStringTypeW
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
OutputDebugStringW
LoadLibraryW
FlushFileBuffers
GetConsoleCP
GetConsoleMode
SetStdHandle
SetFilePointerEx
CreateFileW

gdi32

SelectObject
GetPixel
DeleteObject
DeleteDC
CreateCompatibleDC
GetObjectW

gdiplus

GdiplusShutdown

Sections

.text
Size: 135KB - Virtual size: 135KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 945KB - Virtual size: 944KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4075ebf74b25efa9a87ec5f21609e1f9

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

gdi32

gdiplus

Sections

.text Size: 135KB - Virtual size: 135KB

.rdata Size: 30KB - Virtual size: 30KB

.data Size: 5KB - Virtual size: 12KB

.rsrc Size: 945KB - Virtual size: 944KB

.reloc Size: 17KB - Virtual size: 16KB

.text
Size: 135KB - Virtual size: 135KB

.rdata
Size: 30KB - Virtual size: 30KB

.data
Size: 5KB - Virtual size: 12KB

.rsrc
Size: 945KB - Virtual size: 944KB

.reloc
Size: 17KB - Virtual size: 16KB