dbac1b2192463303f1c1904574091b65_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

dbac1b2192463303f1c1904574091b65_JaffaCakes118
Size

90KB
MD5

dbac1b2192463303f1c1904574091b65
SHA1

0921acccce698dff503a2ff79738acd0764d2b7c
SHA256

57baf1b9eb65e56578610628f7759392f53995b23daff98cb3667bf04fcf69b6
SHA512

173f1858141c8a7c830526969b1fc45184b1c8499aad6546d28132324976fff9fd3c61210498c513da74f6276d3231ba13166a2625479d48c1ada5bbb0f2675d
SSDEEP

1536:MIJ76nomMihppFAsjJoGDbf75I7GT9/UHlvVm7kE4qF8cFyi/0efCGCl1uL41Tpp:5J7EomMirLKGDbfR9sFvVjE4qFA4CGCQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dbac1b2192463303f1c1904574091b65_JaffaCakes118

Files

dbac1b2192463303f1c1904574091b65_JaffaCakes118
.exe windows:5 windows x86 arch:x86

9d353e77708869aaeb62ed3fd5fbaf01

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ntdll

RtlUnwind

gdiplus

GdipSaveGraphics
GdiplusStartup
GdipCreateLineBrush
GdipCreateBitmapFromFile
GdipIsClipEmpty
GdiplusShutdown
GdipAlloc
GdipAddPathClosedCurve
GdipCreateBitmapFromStream
GdipGetClipBounds
GdipGetLogFontA
GdipFree

kernel32

LocalFree
DeleteCriticalSection
GetLocalTime
EnterCriticalSection
GetLastError
InterlockedExchange
GetACP
CompareStringW
LocalReAlloc
MulDiv
LeaveCriticalSection
Sleep
InitializeCriticalSection
GetSystemTimes
FindFirstFileW
WaitForSingleObject
GetFileAttributesA
ReadFile
SetFileAttributesA
GetFileType
FindNextFileA
HeapReAlloc
HeapAlloc
ExitProcess
GetModuleHandleW
HeapFree
QueryPerformanceCounter

user32

EndPaint
BeginPaint
TranslateMessage
PeekMessageA

advapi32

RegOpenKeyA
OpenProcessToken

msvcrt

memset

Exports

Exports

_FindYourself@4
_IFeelLikeAShit@4
_TestThisProgram@8

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 80KB - Virtual size: 79KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_winoc
Size: 512B - Virtual size: 232B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9d353e77708869aaeb62ed3fd5fbaf01

Headers

DLL Characteristics

File Characteristics

Imports

ntdll

gdiplus

kernel32

user32

advapi32

msvcrt

Exports

Exports

Sections

.text Size: 6KB - Virtual size: 6KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: - Virtual size: 160B

.pdata Size: 512B - Virtual size: 512B

.rsrc Size: 80KB - Virtual size: 79KB

_winoc Size: 512B - Virtual size: 232B

.text
Size: 6KB - Virtual size: 6KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: - Virtual size: 160B

.pdata
Size: 512B - Virtual size: 512B

.rsrc
Size: 80KB - Virtual size: 79KB

_winoc
Size: 512B - Virtual size: 232B