09610a5a7183aed5cb114f41db108931_JaffaCakes118

General

Target

09610a5a7183aed5cb114f41db108931_JaffaCakes118
Size

3.4MB
MD5

09610a5a7183aed5cb114f41db108931
SHA1

220b9112f37d8c629cb42a51d71a41a1ea806b85
SHA256

5b70e31596d1d60db644abebeb1f057253b8f122fb6ed890591820e2663e3f35
SHA512

b64ff68758a1865ff4b73fe4d9410b32e9764ded948433775c61e91fceb51e9ebccc4e84afd699f2990625d270bb9a1079554eb22979a772c3397116a422f2d2
SSDEEP

24576:uqJ8H8EJqy+zKKoNv4Q3l49fS+e06QTEn0jsI2syS+jHqjbuIs:VjHz9s7WfSz0x7jsIgKXs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
09610a5a7183aed5cb114f41db108931_JaffaCakes118

Files

09610a5a7183aed5cb114f41db108931_JaffaCakes118
.exe windows:5 windows x86 arch:x86

26f560d83780726dc02e068f5c2ae23f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

DdeReconnect
GetWindowContextHelpId
GetDC

gdi32

GetPixelFormat
AbortPath
GdiAlphaBlend
PlayMetaFile
ExtFloodFill

kernel32

TlsSetValue
VirtualFree
VirtualAllocEx
HeapFree
CreateFiberEx
GetLastError
ResetEvent
ReleaseSemaphore
FormatMessageW
CreateFileW
GetLocaleInfoW
GetUserDefaultUILanguage
GetConsoleWindow
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetCurrentThreadId
TlsAlloc
SetLastError
TlsGetValue
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
RtlUnwind
WriteFile
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
VirtualAlloc
HeapReAlloc
GetProcAddress
LoadLibraryA
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
InterlockedDecrement
InterlockedIncrement

Sections

.text
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 6.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.dtrl
Size: 3.2MB - Virtual size: 3.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 157KB - Virtual size: 157KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

26f560d83780726dc02e068f5c2ae23f

Headers

File Characteristics

Imports

user32

gdi32

kernel32

Sections

.text Size: 31KB - Virtual size: 30KB

.data Size: 12KB - Virtual size: 6.6MB

.idata Size: 2KB - Virtual size: 1KB

.dtrl Size: 3.2MB - Virtual size: 3.2MB

.rsrc Size: 157KB - Virtual size: 157KB

.text
Size: 31KB - Virtual size: 30KB

.data
Size: 12KB - Virtual size: 6.6MB

.idata
Size: 2KB - Virtual size: 1KB

.dtrl
Size: 3.2MB - Virtual size: 3.2MB

.rsrc
Size: 157KB - Virtual size: 157KB