d06c11a1689549471d6048414d7554ed_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

d06c11a1689549471d6048414d7554ed_JaffaCakes118
Size

910KB
MD5

d06c11a1689549471d6048414d7554ed
SHA1

75ab4238f17b0c5d5107492f1ba0889edfc0d42e
SHA256

444f4ca4a93c3831d7cdb01083e74d4d38326d4db285f52ac1004b8b08c98930
SHA512

82212de101e83ce6508ed2a1ee381c78e754efacbd5331eaef78d0e8169fc71f4182e0406980e38c30de8d8db3c79a70c3c77cae7efa84dbdff4f5c1536d65c0
SSDEEP

24576:dPLok+BwHsfffffu+3W1uHPffKSi5i2JnZZ9PYvJhCswiVLZNVLCuq4slztve:d8k+BwHsfffffu+3W1uHPffKSi5i2Jnm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d06c11a1689549471d6048414d7554ed_JaffaCakes118

Files

d06c11a1689549471d6048414d7554ed_JaffaCakes118
.exe windows:4 windows x86 arch:x86

08b07c4b634f9cffd90eaa68a3718301

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

KillTimer
SendMessageA
GetDlgItem
SetTimer
DialogBoxParamW
DialogBoxParamA
SetWindowLongA
GetWindowLongA
SetWindowTextW
SetWindowTextA
LoadStringW
LoadStringA
CharUpperW
CharUpperA
DestroyWindow
EndDialog
PostMessageA
ShowWindow
MessageBoxW

oleaut32

VariantClear
SysAllocString

shell32

ShellExecuteExA

comctl32

ord17

kernel32

GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
InterlockedIncrement
InterlockedDecrement
GetOEMCP
GetACP
GetCPInfo
IsBadReadPtr
GetFileType
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
HeapSize
GetCurrentProcess
TerminateProcess
IsBadWritePtr
HeapReAlloc
HeapCreate
HeapDestroy
GetEnvironmentVariableA
SetUnhandledExceptionFilter
TlsGetValue
IsBadCodePtr
DeleteFileA
WaitForSingleObject
CreateProcessA
CloseHandle
SetCurrentDirectoryA
GetCommandLineW
GetVersionExA
lstrlenA
LeaveCriticalSection
EnterCriticalSection
Sleep
CreateThread
InitializeCriticalSection
DeleteCriticalSection
VirtualAlloc
VirtualFree
GetProcAddress
GetModuleHandleA
MultiByteToWideChar
WideCharToMultiByte
GetLastError
LoadLibraryA
AreFileApisANSI
GetModuleFileNameA
GetModuleFileNameW
LocalFree
FormatMessageA
FormatMessageW
GetWindowsDirectoryA
SetFileTime
CreateFileW
SetLastError
SetFileAttributesA
SetFileAttributesW
RemoveDirectoryA
RemoveDirectoryW
CreateDirectoryA
CreateDirectoryW
DeleteFileW
GetFullPathNameA
GetFullPathNameW
GetCurrentDirectoryA
GetTempPathA
GetTempFileNameA
FindClose
FindFirstFileA
FindFirstFileW
FindNextFileA
CreateFileA
GetFileSize
SetFilePointer
ReadFile
WriteFile
SetEndOfFile
CreateEventA
GetStdHandle
ResetEvent
SetEvent
WaitForMultipleObjects
RtlUnwind
RaiseException
HeapAlloc
HeapFree
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc

Sections

.text
Size: 95KB - Virtual size: 95KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 283KB - Virtual size: 282KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

08b07c4b634f9cffd90eaa68a3718301

Headers

File Characteristics

Imports

user32

oleaut32

shell32

comctl32

kernel32

Sections

.text Size: 95KB - Virtual size: 95KB

.rdata Size: 17KB - Virtual size: 16KB

.data Size: 12KB - Virtual size: 14KB

.rsrc Size: 283KB - Virtual size: 282KB

.text
Size: 95KB - Virtual size: 95KB

.rdata
Size: 17KB - Virtual size: 16KB

.data
Size: 12KB - Virtual size: 14KB

.rsrc
Size: 283KB - Virtual size: 282KB