043d9ff4b93dcb74a113e3d8132976f8_JaffaCakes118

General

Target

043d9ff4b93dcb74a113e3d8132976f8_JaffaCakes118
Size

24KB
MD5

043d9ff4b93dcb74a113e3d8132976f8
SHA1

c1816d4ac922e0ddf141dc4b8e4c737876da4951
SHA256

9ffc7afda0d3affd3ae22c7218e6d9d3af35646aa9ccfbab9b6c6a1c7e45119d
SHA512

df1f23b53261c798e52bb56efd1c09f9b938c2326e74c897c62a45534a4a1bd1a64d532b24c92e63d330115f238b232aaf10fd0d258d00f411507b0b8efbd2aa
SSDEEP

384:TjfZ20yMhCmSZa6u8czVsd1QiI4RkYY/Q8ctGxiHveqzDwZSM:T120bhHUuvY9Yo8cTHkZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
043d9ff4b93dcb74a113e3d8132976f8_JaffaCakes118

Files

043d9ff4b93dcb74a113e3d8132976f8_JaffaCakes118
.dll windows:4 windows x86 arch:x86

00dd01af5be349e49acb88264dd7d4c4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
GetFileAttributesW
ReadProcessMemory
VirtualQueryEx
WideCharToMultiByte
ReadFile
GetFileSize
CreateFileA
SetFilePointer
OutputDebugStringA
HeapAlloc
GetProcessHeap
GetModuleHandleA
GetModuleFileNameA
GetPrivateProfileStringA
GetTempPathA
DeleteFileA
GetCurrentProcessId
OpenProcess
TerminateProcess
GetCurrentProcess
InitializeCriticalSection
Sleep
GetProcAddress
FreeLibrary
LoadLibraryA

user32

GetDC
wvsprintfA
wsprintfA
GetClassNameW
GetWindow
GetWindowRect

msvcrt

free
strcpy
memset
malloc
memcpy
strlen
strrchr
??3@YAXPAX@Z
wcscmp
??2@YAPAXI@Z
fclose
ftell
fseek
fopen
mbstowcs
_except_handler3
strncpy
strcat
rand
srand
time
wcslen
strstr
wcsncat
wcscpy
wcsstr
exit
printf
_stricmp
_local_unwind2
strcmp
_vsnprintf
_strupr
_strcmpi

wininet

InternetCloseHandle

gdiplus

GdipGetImageEncodersSize

gdi32

DeleteObject
CreateCompatibleDC
BitBlt
SelectObject
CreateCompatibleBitmap
DeleteDC
GetDeviceCaps
CreateDCA

Sections

.text
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

00dd01af5be349e49acb88264dd7d4c4

Headers

File Characteristics

Imports

kernel32

user32

msvcrt

wininet

gdiplus

gdi32

Sections

.text Size: 18KB - Virtual size: 18KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 512B - Virtual size: 2KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 18KB - Virtual size: 18KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 512B - Virtual size: 2KB

.reloc
Size: 1KB - Virtual size: 1KB