d071b13e0c62005be4c26198ea5f2536_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

d071b13e0c62005be4c26198ea5f2536_JaffaCakes118
Size

119KB
MD5

d071b13e0c62005be4c26198ea5f2536
SHA1

e6f81252c7597b80096f58b2cc1d7f6ad952ad22
SHA256

720a7821f3e0c3b3472b25d2600b3f5ad9b08d71401b67591539fbc97064d7d0
SHA512

1bb671fde755902fd3fe6c636f162cebe7e79257584d16ebe1b29311ca7560946d6e408bc71b55d5856d8809ba3f7df6bff5993bec66e2848a643b2062864737
SSDEEP

3072:WyNBAihXLv/0Qwf+rRROcaaLMpOWmbdu:b7Xbv/BZOOlM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d071b13e0c62005be4c26198ea5f2536_JaffaCakes118

Files

d071b13e0c62005be4c26198ea5f2536_JaffaCakes118
.exe windows:1 windows x86 arch:x86

ee7fe95ca9ad7eead63e14fdc31bb355

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

IsBadStringPtrA
EnterCriticalSection
VirtualAlloc
SetEvent
VirtualQueryEx
LockResource
SetFilePointer
ResumeThread
GlobalReAlloc
GlobalAddAtomA
OpenEventA
GetModuleHandleA
SizeofResource
GetVersion
GetConsoleCP
UnhandledExceptionFilter
GetStdHandle
GetComputerNameW
IsBadReadPtr
GetStartupInfoA
SetEndOfFile
GetVersionExA
Module32Next
InterlockedExchange
WriteFile
FlushFileBuffers
GetConsoleOutputCP
GlobalAlloc
WideCharToMultiByte
DeleteCriticalSection
VirtualFree
HeapFree
FreeEnvironmentStringsA
ReadFile
FormatMessageA
SetProcessWorkingSetSize
LocalAlloc
GetCurrentProcessId
IsValidCodePage
RaiseException
LocalFree
FindFirstFileA
GetLocaleInfoA
ResetEvent
ExpandEnvironmentStringsA
SetLastError
GetCurrentProcess
IsBadStringPtrW
DeviceIoControl
MapViewOfFile

user32

ChildWindowFromPoint
ExitWindowsEx
EndPaint
GetWindowDC
GetWindowThreadProcessId
GetClassLongA
GetDesktopWindow
MessageBoxA
FindWindowA
GetClientRect
GetWindowPlacement
DeleteMenu
LoadCursorA
InflateRect
RemoveMenu
DialogBoxParamA
DefFrameProcA
DefDlgProcA
DrawEdge
GetKeyState
RegisterWindowMessageA
IsWindowVisible
CopyRect
GetMenuItemID
CreateWindowExA
SetScrollInfo
BeginPaint
InsertMenuA
GetDlgItem
SystemParametersInfoA
PostQuitMessage
GetCapture
BeginDeferWindowPos
EndDialog
SetWindowTextA
CheckMenuItem
RedrawWindow
FillRect
LoadIconA
TranslateAcceleratorA
GetCursorPos
DialogBoxIndirectParamA
GetMenu
SetClipboardData

msvcrt

__set_app_type
__getmainargs
_acmdln
__setusermatherr
_exit
memcpy
_controlfp
_adjust_fdiv
__p__fmode
_except_handler3
_initterm
_XcptFilter
exit
__p__commode

Sections

.text
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 88KB - Virtual size: 87KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ee7fe95ca9ad7eead63e14fdc31bb355

Headers

File Characteristics

Imports

kernel32

user32

msvcrt

Sections

.text Size: 22KB - Virtual size: 22KB

.rdata Size: 3KB - Virtual size: 2KB

.data Size: 5KB - Virtual size: 56KB

.rsrc Size: 88KB - Virtual size: 87KB

.text
Size: 22KB - Virtual size: 22KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 5KB - Virtual size: 56KB

.rsrc
Size: 88KB - Virtual size: 87KB