daa8414c39071f06bb630b020ea1ca8b_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

daa8414c39071f06bb630b020ea1ca8b_JaffaCakes118
Size

255KB
MD5

daa8414c39071f06bb630b020ea1ca8b
SHA1

b31111f501e7a3587fe4f15f6a817241a60ef4cf
SHA256

5a8afbd7866e4cec6ff157543010052ccbcbbb935d7aaffaf2ac7274105b5ac0
SHA512

a7ec6a96a7eb88a6bb8db70a6662baa8946aeabb10ab5bf68ac2a64453a99f78e1de5c603cc0775e50eb105c91d3f7f0459cb32b196852e0f47874adbb56a48a
SSDEEP

6144:wBN4GTHrnFFSl9cwaieLjsDbhx/kmH33X3NJWe/mrWRxBgbB:unFFS8BjsDbhxtnNJWe4WRPgF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
daa8414c39071f06bb630b020ea1ca8b_JaffaCakes118

Files

daa8414c39071f06bb630b020ea1ca8b_JaffaCakes118
.exe windows:5 windows x86 arch:x86

0f1af1de84600cbe1069b8429f5aa45d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

closesocket
ntohs

kernel32

ReadConsoleA
WriteConsoleA
FreeConsole
WriteProcessMemory
lstrlenW
GetModuleFileNameW
ReadProcessMemory
GetCommandLineA
GetLastError
CreateMutexA
GetModuleFileNameA
LoadLibraryA
GetCurrentProcess
LCMapStringA
GetStringTypeW
GetStringTypeA
GetLocaleInfoA
InitializeCriticalSectionAndSpinCount
IsDebuggerPresent
GetModuleHandleA
lstrcmpiA
Sleep
lstrcatA
lstrcpyA
GetProcAddress
LCMapStringW
ExitProcess
lstrlenA
TlsGetValue
SetEnvironmentVariableA
CompareStringW
GetSystemTimeAsFileTime
GetStartupInfoA
HeapFree
HeapAlloc
RaiseException
GetModuleHandleW
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
WideCharToMultiByte
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
RtlUnwind
WriteFile
GetStdHandle
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
VirtualAlloc
HeapReAlloc
HeapSize
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
CompareStringA
MultiByteToWideChar

user32

MessageBoxW
DialogBoxParamA
CreateWindowExA
SetTimer
CreateMenu
GetSysColor
GetParent
GetSubMenu
UpdateWindow
MessageBoxA

gdi32

CreateDCA
DeleteDC
DeleteObject
BitBlt
GetFontData
PolyTextOutA
CreateCompatibleDC
StretchBlt

comdlg32

GetSaveFileNameA
ChooseFontA

shell32

Shell_NotifyIconA

ole32

CoInitialize

Sections

.text
Size: 99KB - Virtual size: 99KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 113KB - Virtual size: 113KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0f1af1de84600cbe1069b8429f5aa45d

Headers

DLL Characteristics

File Characteristics

Imports

ws2_32

kernel32

user32

gdi32

comdlg32

shell32

ole32

Sections

.text Size: 99KB - Virtual size: 99KB

.rdata Size: 37KB - Virtual size: 36KB

.data Size: 4KB - Virtual size: 10KB

.rsrc Size: 113KB - Virtual size: 113KB

.text
Size: 99KB - Virtual size: 99KB

.rdata
Size: 37KB - Virtual size: 36KB

.data
Size: 4KB - Virtual size: 10KB

.rsrc
Size: 113KB - Virtual size: 113KB