d5499dbea103e011318a3b06322af5cd_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

d5499dbea103e011318a3b06322af5cd_JaffaCakes118
Size

56KB
MD5

d5499dbea103e011318a3b06322af5cd
SHA1

e6e08d6dc6f49299ee5aa0e17fb4d296aeb86821
SHA256

2b7d07b06a3e7679cbd9e00872deee25c5d854ecd4973719955a0a0e775e354b
SHA512

54bd69ab798d8732daa54b45b41e46b90fd8533f99755a9810348f554ccb26cad684e81c0aac80ad4782dc45846c6b236320d09143e83e6bc7c0d629609044c7
SSDEEP

768:m1ysuzcs7GN2cR/s1zu1/dT1q+pfCltPOidAyoDG2e9bhj:hsuzvaN+u1/dTxFgFB5oDDybh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d5499dbea103e011318a3b06322af5cd_JaffaCakes118

Files

d5499dbea103e011318a3b06322af5cd_JaffaCakes118
.exe windows:4 windows x86 arch:x86

411b73c5670faac3a3c9214e6896589b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WaitForSingleObject
CreateMutexA
GlobalFree
FreeResource
GlobalUnlock
GlobalLock
GlobalAlloc
SizeofResource
LockResource
LoadResource
FindResourceA
WritePrivateProfileStringA
GetModuleFileNameA
FlushFileBuffers
SetFilePointer
SetStdHandle
ReadFile
GetStringTypeW
GetStringTypeA
HeapReAlloc
VirtualAlloc
InterlockedIncrement
CreateFileA
CloseHandle
GetPrivateProfileStringA
SleepEx
ReleaseMutex
GetVersionExA
FormatMessageA
LocalFree
InterlockedDecrement
WriteFile
VirtualFree
HeapCreate
HeapDestroy
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
LCMapStringW
LCMapStringA
MultiByteToWideChar
WideCharToMultiByte
GetProcAddress
LoadLibraryA
GetLastError
CreateThread
GetCurrentThreadId
TlsSetValue
ExitThread
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapFree
HeapAlloc
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetCPInfo
GetACP
GetOEMCP
TlsAlloc
SetLastError
TlsGetValue
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
RtlUnwind

user32

ShowWindow
PostMessageA
wsprintfA
TranslateMessage
DispatchMessageA
EndDialog
CreateDialogParamA
GetWindowRect
MoveWindow
PeekMessageA
GetDlgItem
EnableWindow
SetWindowTextA
SendDlgItemMessageA
SetTimer
KillTimer
RegisterWindowMessageA
DialogBoxParamA
MessageBoxA

advapi32

CryptCreateHash
CryptHashData
CryptDeriveKey
CryptDestroyHash
CryptDecrypt
CryptDestroyKey
CryptReleaseContext
CryptAcquireContextA

shell32

ShellExecuteA

ole32

CreateStreamOnHGlobal

oleaut32

OleLoadPicture

rasapi32

RasDialA
RasDeleteEntryA
RasEnumConnectionsA
RasGetEntryDialParamsA
RasHangUpA
RasGetConnectStatusA
RasGetErrorStringA
RasSetEntryPropertiesA
RasEnumDevicesA

Sections

.text
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

411b73c5670faac3a3c9214e6896589b

Headers

File Characteristics

Imports

kernel32

user32

advapi32

shell32

ole32

oleaut32

rasapi32

Sections

.text Size: 28KB - Virtual size: 25KB

.rdata Size: 8KB - Virtual size: 4KB

.data Size: 4KB - Virtual size: 54KB

.rsrc Size: 12KB - Virtual size: 8KB

.text
Size: 28KB - Virtual size: 25KB

.rdata
Size: 8KB - Virtual size: 4KB

.data
Size: 4KB - Virtual size: 54KB

.rsrc
Size: 12KB - Virtual size: 8KB