d2a1218e01496159bcb32a658521a055_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

d2a1218e01496159bcb32a658521a055_JaffaCakes118
Size

518KB
MD5

d2a1218e01496159bcb32a658521a055
SHA1

df7f9e3aa8544a08e72215517fbace9f98de675d
SHA256

b108d675d7d3b2a80de66651a5175cbde5aae12d5e98293305cb2ee13b1f9e3c
SHA512

ed0c868511160b2f2ef80709abf7f617cbf57ebe8223e0ee9666d1d31f599786a00077cd76f32b7a4ac1b8530dc68b9219a3f6449a63902bd5af86c2852943dc
SSDEEP

6144:mGlBSkunkxF6b8E+395j7z+qmXNtMLvGBwq4wB7bXd5s+RE5urDEYs487jOYgAK:m8A8391ONtkvIwqb55xRUSEgCOYpK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d2a1218e01496159bcb32a658521a055_JaffaCakes118

Files

d2a1218e01496159bcb32a658521a055_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d38caea1407ec3e2155dd552aaf9b88f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comdlg32

GetSaveFileNameA
PageSetupDlgW
PageSetupDlgA

user32

SendNotifyMessageW
CreateDialogIndirectParamW
SetActiveWindow
DdeCreateStringHandleW
SetWindowsHookA
InvalidateRgn
ExitWindowsEx
RegisterClassA
DdeCreateDataHandle
GetWindowTextLengthW
EndDialog
DefDlgProcA
SendInput
SetClipboardData
GetMessageA
RegisterClassExA
GetPropW
DefFrameProcW
DrawEdge
SetWindowLongA

kernel32

InterlockedIncrement
SetEnvironmentVariableA
GetProcessHeap
GetCPInfo
SetHandleCount
SetLastError
FreeEnvironmentStringsA
GetDateFormatA
VirtualQuery
GetLocaleInfoW
WideCharToMultiByte
GetModuleFileNameW
GetStdHandle
WriteConsoleW
GetTickCount
GetEnvironmentStringsW
GetVersionExW
GetModuleHandleA
GetConsoleMode
VirtualFree
GetCurrentProcessId
FreeEnvironmentStringsW
SetEnvironmentVariableW
LCMapStringA
LeaveCriticalSection
InterlockedExchange
LCMapStringW
LoadLibraryA
SetUnhandledExceptionFilter
GetNumberFormatW
IsValidLocale
ReadFile
TlsAlloc
WriteConsoleA
GetCommandLineA
WriteFile
EnumSystemLocalesA
GetACP
TerminateProcess
GetConsoleOutputCP
ExitProcess
GetCurrentThreadId
CloseHandle
GetStringTypeA
FlushFileBuffers
DeleteCriticalSection
HeapAlloc
QueryPerformanceCounter
Sleep
GetTimeZoneInformation
CreateFileA
GetFileType
TlsGetValue
GetTimeFormatA
GetModuleFileNameA
GetCommandLineW
GetConsoleTitleW
MultiByteToWideChar
CreateMutexA
IsValidCodePage
GetCurrentThread
InitializeCriticalSection
GetOEMCP
SetConsoleTextAttribute
TlsFree
OpenMutexA
EnterCriticalSection
GetUserDefaultLCID
HeapDestroy
GetSystemTimeAsFileTime
CompareStringW
HeapSize
InitializeCriticalSectionAndSpinCount
GetVersionExA
GetLocaleInfoA
SetStdHandle
GetCurrentProcess
TlsSetValue
HeapReAlloc
FreeLibrary
HeapFree
WriteConsoleOutputA
UnhandledExceptionFilter
HeapCreate
RtlUnwind
GetConsoleCP
SetFilePointer
GetEnvironmentStrings
InterlockedDecrement
VirtualAlloc
GetStringTypeW
GetProcAddress
GetStartupInfoW
InterlockedExchangeAdd
IsDebuggerPresent
GetStartupInfoA
CompareStringA
GetLastError
SetConsoleCtrlHandler

comctl32

InitCommonControlsEx

Sections

.text
Size: 186KB - Virtual size: 186KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 313KB - Virtual size: 313KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d38caea1407ec3e2155dd552aaf9b88f

Headers

File Characteristics

Imports

comdlg32

user32

kernel32

comctl32

Sections

.text Size: 186KB - Virtual size: 186KB

.rdata Size: 10KB - Virtual size: 39KB

.data Size: 313KB - Virtual size: 313KB

.rsrc Size: 7KB - Virtual size: 6KB

.text
Size: 186KB - Virtual size: 186KB

.rdata
Size: 10KB - Virtual size: 39KB

.data
Size: 313KB - Virtual size: 313KB

.rsrc
Size: 7KB - Virtual size: 6KB