0d114f0c19eb67cb7b0665ad4ae79f2c_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

0d114f0c19eb67cb7b0665ad4ae79f2c_JaffaCakes118
Size

165KB
MD5

0d114f0c19eb67cb7b0665ad4ae79f2c
SHA1

55a8bf6516db1f7ac7ebf43d6c79c62fe8dd0c83
SHA256

2c82497c022e742d25ee16a3d9bdda9e401b2c2bf02a62e0d91c02b48e29df6c
SHA512

ffd3b992d7907d02b9e9890703065064a4bc5f63a12b17a5555c5b1827a7c6f5d6fa482e379b39ae8ec7e50a2d424cf58dc04e5c27691811f0eca59e0f95d390
SSDEEP

3072:DhYp1FkbBkw0WEBenWofoDtL+wRz7qZ1UoPIn1R9FzFySZ6x:Depsb/0WEEWCoiwRO1UV1R9FzFjC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0d114f0c19eb67cb7b0665ad4ae79f2c_JaffaCakes118

Files

0d114f0c19eb67cb7b0665ad4ae79f2c_JaffaCakes118
.dll windows:5 windows x86 arch:x86

45ad0241a727f07a0fd9ff6ece7d05b8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ReadFile
VirtualAlloc

gdi32

CreateCompatibleDC
CreateFontIndirectW
CreatePen
CreatePolygonRgn
CreateSolidBrush
DeleteDC
DeleteObject
Ellipse
EnableEUDC
EnumFontFamiliesW
ExtTextOutA
ExtTextOutW
FillRgn
GetBitmapBits
CreateCompatibleBitmap
GetObjectW
GetRgnBox
GetStockObject
GetTextExtentExPointW
GetTextExtentPoint32A
GetTextExtentPoint32W
GetTextExtentPointW
GetTextMetricsW
OffsetRgn
CreateBitmap
Rectangle
SelectObject
SetBitmapBits
SetBkColor
SetTextColor
StretchBlt
TranslateCharsetInfo
BitBlt
GetFontData
PatBlt

comdlg32

ChooseFontW
GetSaveFileNameW
GetOpenFileNameW

advapi32

RegOpenKeyW

shell32

ShellAboutW

imm32

ImmSetConversionStatus
ImmSetCompositionStringW
ImmRegisterWordW
ImmIsIME
ImmAssociateContext
ImmConfigureIMEW
ImmCreateContext
ImmDestroyContext
ImmEnumRegisterWordW
ImmEscapeW
ImmGetCompositionStringW
ImmGetConversionStatus

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 127KB - Virtual size: 127KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.f444444
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 716B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

45ad0241a727f07a0fd9ff6ece7d05b8

Headers

File Characteristics

Imports

kernel32

gdi32

comdlg32

advapi32

shell32

imm32

Sections

.text Size: 12KB - Virtual size: 11KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 127KB - Virtual size: 127KB

.f444444 Size: 10KB - Virtual size: 9KB

.rsrc Size: 3KB - Virtual size: 3KB

.reloc Size: 1024B - Virtual size: 716B

.text
Size: 12KB - Virtual size: 11KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 127KB - Virtual size: 127KB

.f444444
Size: 10KB - Virtual size: 9KB

.rsrc
Size: 3KB - Virtual size: 3KB

.reloc
Size: 1024B - Virtual size: 716B