022990c273ab941404f34f4ebabf1236_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

022990c273ab941404f34f4ebabf1236_JaffaCakes118
Size

269KB
MD5

022990c273ab941404f34f4ebabf1236
SHA1

2cdfb4c11551e7a33312b49a4e378ac800de0fa8
SHA256

1667134c113eaaa29348b200faef45d37cd9f30dd3c699b9db78a109ea9899fc
SHA512

200a67ba1ec82078f8a0122e222974a2af0224bf2820161028eb9d9e0db68d942e63467736b90cc4d6b036ef3f3a0e7d67f997352186642fbd96d386f4513bbb
SSDEEP

6144:xWlZYCUBOB7aIrDX/C5q+ARdqPsSkvhioJ/dg:xkZYCUBOhaIrDXaU/TqUSkEozg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
022990c273ab941404f34f4ebabf1236_JaffaCakes118

Files

022990c273ab941404f34f4ebabf1236_JaffaCakes118
.exe windows:5 windows x86 arch:x86

205ae5d4f3ab3e773bea483b0316df70

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LocalFree
CreateFileW
WriteConsoleW
SetStdHandle
GetStringTypeW
GetCurrentProcessId
HeapReAlloc
HeapSize
GetCurrentProcess
GetConsoleCP
SetFilePointer
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
CloseHandle
LocalAlloc
LoadLibraryA
GetProcAddress
FlushFileBuffers
GetLastError
MultiByteToWideChar
GlobalUnlock
GlobalAlloc
OpenProcess
GetTickCount
LCMapStringW
GlobalLock
Sleep
RtlUnwind
GetSystemTimeAsFileTime
QueryPerformanceCounter
GetEnvironmentStringsW
WideCharToMultiByte
FreeEnvironmentStringsW
GetConsoleMode
HeapAlloc
HeapFree
GetModuleHandleW
ExitProcess
DecodePointer
GetCommandLineA
HeapSetInformation
GetStartupInfoW
RaiseException
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
HeapCreate
EncodePointer
EnterCriticalSection
LeaveCriticalSection
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
LoadLibraryW
WriteFile
GetModuleFileNameW
GetModuleFileNameA

user32

EndPaint
CloseClipboard
IsIconic
SetCapture
BeginPaint
EnumWindows
GetWindowLongA
CheckDlgButton
LoadBitmapW
CloseWindow
SetClipboardData
FindWindowA
SetScrollInfo
GetClientRect

gdi32

SetMapMode
Polyline
GetStockObject
TextOutA
SetWindowExtEx

comdlg32

PrintDlgA

advapi32

RegOpenKeyExW

oleaut32

SysAllocStringLen
SysFreeString
VariantClear

psapi

GetModuleBaseNameA
EnumProcessModules

activeds

ord9

Sections

.text
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 184KB - Virtual size: 212KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

205ae5d4f3ab3e773bea483b0316df70

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

oleaut32

psapi

activeds

Sections

.text Size: 68KB - Virtual size: 67KB

.rdata Size: 14KB - Virtual size: 14KB

.data Size: 184KB - Virtual size: 212KB

.rsrc Size: 1KB - Virtual size: 1KB

.text
Size: 68KB - Virtual size: 67KB

.rdata
Size: 14KB - Virtual size: 14KB

.data
Size: 184KB - Virtual size: 212KB

.rsrc
Size: 1KB - Virtual size: 1KB