d278a9edb74699c6d86a53bee35d071f_JaffaCakes118

General

Target

d278a9edb74699c6d86a53bee35d071f_JaffaCakes118
Size

408KB
MD5

d278a9edb74699c6d86a53bee35d071f
SHA1

2138a7f0c8bad819308810fe81c95975ba0a96b6
SHA256

305f26fef0105d2bc7f91c358b5783afa0513caf045aff4adb3a9f59d59bbd0f
SHA512

5e2a2917557541da08498d58fc4a500d74f92b8b04a9ad36111dfb8f22986d733106ca1212a39e1e6b6dd7c79deac6a3df117bb779c19bd2505a3bb30ffdc8f6
SSDEEP

6144:X1hWh/28pJ1Pz4WbmzKsPz4WnE48bWUK3:XzY/Tpz4Wbm224WEP6UK3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d278a9edb74699c6d86a53bee35d071f_JaffaCakes118

Files

d278a9edb74699c6d86a53bee35d071f_JaffaCakes118
.dll windows:4 windows x86 arch:x86

9fdca46aa1f44a0783fcf6d99fca176f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

lstrlenW
InterlockedIncrement
lstrcmpiW
InterlockedDecrement
DeleteCriticalSection
InterlockedExchange
lstrcpyW
InterlockedCompareExchange
IsDebuggerPresent
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
OutputDebugStringA
InitializeCriticalSection
SetThreadLocale
ReplaceFileA
GetLocaleInfoW
Sleep
GetLastError

user32

GetWindowTextW
GetActiveWindow
SetWindowLongW
GetWindowLongW
CharNextW
LoadStringW
GetWindowRect
MessageBoxW
GetParent
GetDlgItem
UnregisterClassA
MapWindowPoints
SystemParametersInfoA
SetDlgItemTextW
GetDlgItemTextW
SetWindowPos
wsprintfW
SendMessageW

gdi32

CreateDIBSection
GdiFlush

shell32

DragQueryFileW

ole32

CoTaskMemRealloc
ReleaseStgMedium
StringFromGUID2
CoCreateInstance
CoTaskMemAlloc
CoTaskMemFree

msvcrt

isdigit
strlen
memset
strcpy
strstr
malloc
free
memcpy

comctl32

ImageList_Add
ImageList_Write
ImageList_GetIcon

shlwapi

PathStripPathW

Exports

Exports

EyiaeryYO

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 99KB - Virtual size: 418KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 293KB - Virtual size: 292KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9fdca46aa1f44a0783fcf6d99fca176f

Headers

File Characteristics

Imports

kernel32

user32

gdi32

shell32

ole32

msvcrt

comctl32

shlwapi

Exports

Exports

Sections

.text Size: 13KB - Virtual size: 13KB

.data Size: 99KB - Virtual size: 418KB

.rsrc Size: 293KB - Virtual size: 292KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 13KB - Virtual size: 13KB

.data
Size: 99KB - Virtual size: 418KB

.rsrc
Size: 293KB - Virtual size: 292KB

.reloc
Size: 1KB - Virtual size: 1KB