fabfc503eb52ce5d44363bfa139aed69_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

fabfc503eb52ce5d44363bfa139aed69_JaffaCakes118
Size

412KB
MD5

fabfc503eb52ce5d44363bfa139aed69
SHA1

ddfa6af6f2a6f55aff7e64078aecdb92d5f225ac
SHA256

eaa2dfb647e4df0e13f6b6642dea2d8eb8ee1aea1378806f5ccdf63450c3a3eb
SHA512

9411c9e3cb6a0891a20a1ffe61ebef5ba07fc9b13242716714b65ee678e67d7c1ba4f2557d251bddd3185440057ebf1d697cfc0efaf841e9d9b1200c6e5e856a
SSDEEP

6144:zkz2zDxjcGiss4tOdw6riVERyddansGYwIJ:oqrd6GVERyddHr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fabfc503eb52ce5d44363bfa139aed69_JaffaCakes118

Files

fabfc503eb52ce5d44363bfa139aed69_JaffaCakes118
.exe windows:5 windows x86 arch:x86

baf66f89251f7e09bcc7da22537a8e63

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

LoadAcceleratorsA
LoadStringA
GetMessageA
TranslateAcceleratorA
TranslateMessage
DispatchMessageA
LoadCursorA
LoadIconA
RegisterClassExA
PostQuitMessage
SetFocus
DefWindowProcA
SetTimer
PostMessageA
DestroyWindow
LoadBitmapA
SendMessageA
CreateWindowExA
UpdateWindow
ShowWindow
LoadBitmapW
MoveWindow
InvalidateRect
DestroyCursor
GetParent
GetClassNameW
SetWindowTextW
GetMenuItemID
GetMenu
FrameRect
SetWindowLongA

kernel32

GetConsoleMode
GetConsoleCP
FlushFileBuffers
LCMapStringEx
HeapSize
GetStringTypeW
HeapReAlloc
HeapAlloc
RtlUnwind
LoadLibraryW
OutputDebugStringW
SetStdHandle
IsDebuggerPresent
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
Sleep
HeapFree
CreateFileW
GetStartupInfoA
GetTempPathA
lstrcatA
lstrcpyA
GetSystemInfo
GetModuleHandleA
GetProcessHeap
SetLastError
GetVersionExA
WriteConsoleW
SetFilePointerEx
LoadLibraryExW
GetStdHandle
GetCommandLineA
GetLastError
InterlockedIncrement
InterlockedDecrement
GetCurrentThreadId
EncodePointer
DecodePointer
ExitProcess
GetModuleHandleExW
GetProcAddress
MultiByteToWideChar
CloseHandle
WriteFile
GetModuleFileNameW
GetFileType
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
InitOnceExecuteOnce
GetStartupInfoW
GetModuleFileNameA
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetTickCount64
GetEnvironmentStringsW
FreeEnvironmentStringsW
WideCharToMultiByte
UnhandledExceptionFilter
SetUnhandledExceptionFilter
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
GetCurrentProcess
TerminateProcess
GetModuleHandleW
IsProcessorFeaturePresent
EnterCriticalSection
LeaveCriticalSection

comdlg32

GetOpenFileNameA

comctl32

ord17

Sections

.text
Size: 279KB - Virtual size: 279KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 91KB - Virtual size: 91KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 39KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

baf66f89251f7e09bcc7da22537a8e63

Headers

DLL Characteristics

File Characteristics

Imports

user32

kernel32

comdlg32

comctl32

Sections

.text Size: 279KB - Virtual size: 279KB

.rdata Size: 91KB - Virtual size: 91KB

.data Size: 39KB - Virtual size: 48KB

.rsrc Size: 1KB - Virtual size: 1KB

.text
Size: 279KB - Virtual size: 279KB

.rdata
Size: 91KB - Virtual size: 91KB

.data
Size: 39KB - Virtual size: 48KB

.rsrc
Size: 1KB - Virtual size: 1KB