d9df382141623b23aebac011b623e7b4_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

d9df382141623b23aebac011b623e7b4_JaffaCakes118
Size

23KB
MD5

d9df382141623b23aebac011b623e7b4
SHA1

e6b79a099c3e79811c1b74c52ed647864d7b3c61
SHA256

4763313d81822f08d9aef28eb386cf6366a58b0ed590f8297a1dd4124a70133c
SHA512

f392210e7679112da2e1072788669b7a95ae4543f799d4daed3c7432106928d4c0db66b53f2df2cd7ec12eb65804c57ae70bd3d3a38d67ab4a2493bce06a8da2
SSDEEP

384:aZ9CTV4rIW+iaeyRJj1gD5F0VmJRjnnA4NB2/dMagP5H5ryJ28mPYam+:aeLjhRB1gD5s+Rjn36dM/5H42lPU+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d9df382141623b23aebac011b623e7b4_JaffaCakes118

Files

d9df382141623b23aebac011b623e7b4_JaffaCakes118
.exe windows:5 windows x86 arch:x86

7c7289f7535a21d0fc38604574631c14

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
GetProcAddress
CreateEventW
GetSystemTimeAsFileTime
CreateThread
GetModuleFileNameA
InterlockedCompareExchange
LoadLibraryA
CreateEventW
MultiByteToWideChar
GetCurrentThreadId
GetSystemTimeAsFileTime
lstrlenA
CloseHandle
lstrlenA
GetSystemTimeAsFileTime
CreateFileW
LocalAlloc
LoadLibraryA
VirtualAlloc
GetModuleFileNameA
InterlockedDecrement
Sleep
GetLastError
GetModuleFileNameW
FreeLibrary
CreateThread
lstrlenA
HeapDestroy
CreateFileW
LoadLibraryW
GetTickCount
GetProcessHeap
CreateThread
HeapFree
HeapFree
GetTickCount
InitializeCriticalSection
ReadFile
GetVersionExA
ReadFile
QueryPerformanceCounter
GetSystemTimeAsFileTime
DeleteCriticalSection
GetModuleFileNameA
EnterCriticalSection
Sleep
GetCurrentProcessId
GetModuleHandleW
CloseHandle
GetTickCount
LocalFree
GetCurrentThreadId
LeaveCriticalSection
DeleteCriticalSection
DisableThreadLibraryCalls
GetProcessHeap
LoadLibraryW
LocalAlloc
GetProcessHeap

user32

GetWindowLongW
KillTimer
BeginPaint
CreateWindowExW
LoadStringW
GetSysColor
InvalidateRect
GetDesktopWindow
LoadStringW
PostMessageW
PostMessageW
DestroyWindow
SetWindowPos
MessageBoxW
DefWindowProcW
ReleaseDC
SetCursor
DefWindowProcW
SetCursor
GetWindowLongW
PostMessageW
SendDlgItemMessageW
SetCursor
LoadCursorW
DefWindowProcW
EndDialog
BeginPaint
CreateWindowExW
CharNextW
TranslateMessage
LoadCursorW
SetForegroundWindow
GetSystemMetrics
EndPaint
EnableWindow
GetDC
DefWindowProcW
SendMessageW
DialogBoxParamW
DispatchMessageW
KillTimer
KillTimer
DialogBoxParamW
InvalidateRect
SetWindowPos
SetWindowTextW
SetWindowPos
GetWindowLongW
ReleaseDC
KillTimer
GetParent

Sections

.text
Size: 18KB - Virtual size: 20KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7c7289f7535a21d0fc38604574631c14

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

Sections

.text Size: 18KB - Virtual size: 20KB

.data Size: 512B - Virtual size: 4KB

.rdata Size: 3KB - Virtual size: 4KB

.rsrc Size: 1024B - Virtual size: 4KB

.text
Size: 18KB - Virtual size: 20KB

.data
Size: 512B - Virtual size: 4KB

.rdata
Size: 3KB - Virtual size: 4KB

.rsrc
Size: 1024B - Virtual size: 4KB