093064c078d790a711131e3309c84a2f_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

093064c078d790a711131e3309c84a2f_JaffaCakes118
Size

50KB
MD5

093064c078d790a711131e3309c84a2f
SHA1

4aa1b16c12cd21a9d207211a1be5df8983617164
SHA256

bd200f12b061f458988ba7c549ba6f60d515b5a3f4b93449ad548e151beb6309
SHA512

d8b0cf587806e0b28a64b8bc6defd20d99d1dd133cc1022e775d0287197254bb8f28298033c2c6c90cb0a4dfff32b88aceafe097a1dae16d346c86f443222ac0
SSDEEP

1536:Dxff4j3wQKjupYdVnqUqbs4HpG6L0iOQs0aDd3SZG:DxA3wQKcMn/qbs4HpfL3bs0acZG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
093064c078d790a711131e3309c84a2f_JaffaCakes118

Files

093064c078d790a711131e3309c84a2f_JaffaCakes118
.exe windows:5 windows x86 arch:x86

1d9cdd1a7e52bf179fc3c3a9bb6d21d1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrlenA
GetLastError
GetModuleHandleA
GetModuleFileNameA
InterlockedIncrement
CreateFileW
GetCurrentThreadId
InterlockedDecrement
VirtualAlloc
lstrcmpiW
GetModuleFileNameA
GetSystemTimeAsFileTime
CreateThread
GetCurrentProcess
InterlockedIncrement
InterlockedIncrement
EnterCriticalSection
EnterCriticalSection
DisableThreadLibraryCalls
EnterCriticalSection
GetProcAddress
lstrlenA
GetModuleHandleA
LocalFree
InterlockedIncrement
HeapDestroy
InterlockedDecrement
HeapFree
InitializeCriticalSection
CreateThread
VirtualAlloc
QueryPerformanceCounter
CreateEventW
InitializeCriticalSection
MultiByteToWideChar
GetModuleFileNameW
LeaveCriticalSection
GetTickCount
QueryPerformanceCounter
LocalFree
CreateThread
QueryPerformanceCounter
GetProcessHeap
GetSystemTimeAsFileTime
LoadLibraryA
UnhandledExceptionFilter
HeapAlloc
LoadLibraryA
DisableThreadLibraryCalls
LocalFree
QueryPerformanceCounter
CloseHandle
GetCurrentProcess
GetLastError
GetProcAddress
SetLastError
LocalAlloc
GetLastError

user32

SetFocus
GetSystemMetrics
SendMessageW
ShowWindow
SetTimer
TranslateMessage
wsprintfA
SetCursor
GetClientRect
IsWindow
TranslateMessage
IsDlgButtonChecked
TranslateMessage
DestroyWindow
SetWindowLongW
GetClientRect
BeginPaint
IsDlgButtonChecked
GetClientRect
DispatchMessageW
EndPaint
SetDlgItemTextW
SetWindowTextW
LoadCursorW
wsprintfA
SetWindowLongW
GetSystemMetrics
BeginPaint
EndPaint
EndDialog
EnableWindow
GetFocus
PeekMessageW
GetDesktopWindow
ShowWindow
SetDlgItemTextW
EndDialog
SetWindowPos
GetSystemMetrics
ShowWindow
GetSystemMetrics
GetWindowLongW
SetForegroundWindow
GetParent
SetCursor
EnableWindow
SendMessageW
MessageBoxW
PeekMessageW
SetTimer
GetDesktopWindow
LoadIconW
PeekMessageW
GetClientRect
CreateWindowExW

Sections

.text
Size: 22KB - Virtual size: 28KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 23KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

1d9cdd1a7e52bf179fc3c3a9bb6d21d1

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

Sections

.text Size: 22KB - Virtual size: 28KB

.data Size: 512B - Virtual size: 4KB

.rdata Size: 3KB - Virtual size: 4KB

.rsrc Size: 23KB - Virtual size: 24KB

.text
Size: 22KB - Virtual size: 28KB

.data
Size: 512B - Virtual size: 4KB

.rdata
Size: 3KB - Virtual size: 4KB

.rsrc
Size: 23KB - Virtual size: 24KB