e232fc1b69194ef6da74aebd26b6faa7_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

e232fc1b69194ef6da74aebd26b6faa7_JaffaCakes118
Size

193KB
MD5

e232fc1b69194ef6da74aebd26b6faa7
SHA1

c79b3196e05fbc1eed121e1907efb19090823011
SHA256

5f1923018cf3222406f36623f27bb7d7660b9e4444232b260ef9b1e7488a6e61
SHA512

9e5117496c5bde876b4b60b2ba43a7e8999235e45864be8d8b573d3829ac4ba2ac64b9613904ba80ab142b845a3c97d59676df284c1d8903d8f12e44c1100e92
SSDEEP

3072:1RjrsglUjntI8dEbGAY4+hJGpV9lGjrURjrsglUjntI8dEbGAY4+hJGpV9lGjr:LrZluFGoAQKrZluFGoAQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e232fc1b69194ef6da74aebd26b6faa7_JaffaCakes118

Files

e232fc1b69194ef6da74aebd26b6faa7_JaffaCakes118
.dll windows:4 windows x86 arch:x86

3f8f81dbca2822c0fbcbd6c014daa529

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetComputerNameA
PurgeComm
lstrcpynA
LockFile
SetFileValidData
GetModuleHandleA
GetThreadTimes
GetDllDirectoryA
ReadConsoleA
GetProcessVersion
lstrlen
GetSystemWindowsDirectoryA
GetCalendarInfoA
TlsFree
SetThreadUILanguage
SetConsoleIcon
RaiseException
GetConsoleCommandHistoryLengthA
HeapLock
SetDefaultCommConfigA
ReadConsoleOutputCharacterA
VirtualAllocEx
SetConsoleOutputCP
OpenMutexA
LocalAlloc
GetCurrentThread
IsDebuggerPresent
ReadConsoleOutputCharacterA
LZOpenFileA
GetCurrentDirectoryA
SetSystemTime
VerifyVersionInfoA
OpenJobObjectA
CreateEventA
GetFileInformationByHandle
LocalLock
GetCommState
GetCommTimeouts
lstrcmpA
TlsAlloc
GetFileSize

user32

GetWindow
GetClassLongA
GetProgmanWindow
CheckDlgButton
DrawTextA
GetThreadDesktop
LoadLocalFonts
AllowForegroundActivation
GetClipboardFormatNameA
IntersectRect
SendIMEMessageExA
EnableScrollBar
EnumWindowStationsA
DisplayExitWindowsWarnings
SendDlgItemMessageA
EnumDisplaySettingsExA
GetDlgCtrlID
GetMessageTime
LoadKeyboardLayoutEx
ToUnicode
RealGetWindowClassA
SetSysColorsTemp
FlashWindowEx
CreateDialogIndirectParamA
GetClipboardSequenceNumber
TileChildWindows
MessageBeep
GetForegroundWindow
RealChildWindowFromPoint
EnumThreadWindows
DispatchMessageA
DisableProcessWindowsGhosting

hid

HidD_GetPhysicalDescriptor
HidD_SetNumInputBuffers

dsound

DirectSoundCreate

Exports

Exports

AlphaBlend

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 78KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 51KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3f8f81dbca2822c0fbcbd6c014daa529

Headers

File Characteristics

Imports

kernel32

user32

hid

dsound

Exports

Exports

Sections

.text Size: 3KB - Virtual size: 3KB

.rdata Size: 2KB - Virtual size: 78KB

.data Size: 51KB - Virtual size: 51KB

.idata Size: 2KB - Virtual size: 1KB

.rsrc Size: 33KB - Virtual size: 32KB

.reloc Size: 3KB - Virtual size: 2KB

.text
Size: 3KB - Virtual size: 3KB

.rdata
Size: 2KB - Virtual size: 78KB

.data
Size: 51KB - Virtual size: 51KB

.idata
Size: 2KB - Virtual size: 1KB

.rsrc
Size: 33KB - Virtual size: 32KB

.reloc
Size: 3KB - Virtual size: 2KB