de826e4c4d04fd3a68585e5973aab06d_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

de826e4c4d04fd3a68585e5973aab06d_JaffaCakes118
Size

123KB
MD5

de826e4c4d04fd3a68585e5973aab06d
SHA1

980422c77e8dc4404bd649c2381357cf49f5fdc7
SHA256

e7749a24ea522ddc4a30c62d2c1c02eb2b3c071525d7bd0be44fd1fa93af9ac7
SHA512

d8fc33e9cc6904f320b5bbe17a9d2e88187bdd2513c33e88a898b9ca083c62f0b471a189cdd888720e2132e22bd7ae7a0946bc242674b59096078d00a81d025e
SSDEEP

3072:lyvbX3RPbvMTxoFWd319cMJMVIpkmYeAlGz:l2XpvMGF2F9c7ILlwG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
de826e4c4d04fd3a68585e5973aab06d_JaffaCakes118

Files

de826e4c4d04fd3a68585e5973aab06d_JaffaCakes118
.dll windows:4 windows x86 arch:x86

43e6d2059b88f154801ecebc158ae73b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

InterlockedDecrement
EnterCriticalSection
LeaveCriticalSection
InterlockedIncrement
FreeLibrary
GetLocalTime
SizeofResource
FindResourceW
HeapFree
TerminateProcess
HeapSize
GetVersion
GetFileAttributesW
GetProcAddress
GetModuleHandleA
ReleaseMutex
LoadResource
LockResource
InterlockedExchange
lstrlenW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
VirtualAlloc
lstrcpyW
CloseHandle
DisableThreadLibraryCalls
lstrcatW
GetModuleFileNameW
LocalFree
OutputDebugStringW
GlobalFree
GlobalAlloc
LocalAlloc
MultiByteToWideChar
GetLastError
VirtualProtect
VirtualFree
GetCommandLineA
HeapAlloc

user32

RegisterClassA
UnregisterClassA
DefWindowProcW
LoadStringW
MessageBoxW
ShowWindow
GetWindowTextW
SetWindowTextW
EndDialog
GetDlgCtrlID
SendMessageW
SetWindowPos
BeginPaint
EndPaint
WinHelpW
LoadMenuW
GetSubMenu
TrackPopupMenu
DialogBoxParamW
SendDlgItemMessageW
GetDlgItemTextW
SetFocus
SetWindowLongW
SetDlgItemTextW
CheckDlgButton
SetDlgItemInt
IsDlgButtonChecked
GetWindowLongW
GetWindowInfo
CreateWindowExW
EnableWindow
GetDlgItem
GetWindowRect

advapi32

RegEnumValueW
RegEnumKeyExW
RegSetValueW
RegDeleteKeyW
RegOpenKeyW
RegCloseKey
RegCreateKeyExW
RegSetValueExW
RegQueryValueExW
RegOpenKeyExW

gdi32

RealizePalette
SelectPalette
CreatePalette
GetObjectW
CreateDIBitmap
DeleteObject
DeleteDC
BitBlt
SelectObject
CreateCompatibleDC

ole32

CoTaskMemAlloc
CoUninitialize
CoFreeUnusedLibraries
CoTaskMemFree
StringFromGUID2
CoCreateInstance

msvcr71

wcscat
iswalnum
wcslen
__dllonexit
sprintf
swprintf
_except_handler3
_itow
wcschr
wcscmp
wcsncpy
wcscpy
strncmp
vswprintf
free
_adjust_fdiv
malloc
_initterm
_onexit
_callnewh
_CxxThrowException
_vsnwprintf
memset
_vsnprintf
wcsncmp
wcsstr
__CppXcptFilter
_XcptFilter

Sections

.text
Size: 105KB - Virtual size: 104KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sxdata
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

43e6d2059b88f154801ecebc158ae73b

Headers

File Characteristics

Imports

kernel32

user32

advapi32

gdi32

ole32

msvcr71

Sections

.text Size: 105KB - Virtual size: 104KB

.rdata Size: 3KB - Virtual size: 3KB

.data Size: 3KB - Virtual size: 38KB

.sxdata Size: 512B - Virtual size: 8B

.rsrc Size: 5KB - Virtual size: 5KB

.reloc Size: 4KB - Virtual size: 4KB

.text
Size: 105KB - Virtual size: 104KB

.rdata
Size: 3KB - Virtual size: 3KB

.data
Size: 3KB - Virtual size: 38KB

.sxdata
Size: 512B - Virtual size: 8B

.rsrc
Size: 5KB - Virtual size: 5KB

.reloc
Size: 4KB - Virtual size: 4KB