0e06fcdc1e9caa6e5b327156ce017e76_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

0e06fcdc1e9caa6e5b327156ce017e76_JaffaCakes118
Size

323KB
MD5

0e06fcdc1e9caa6e5b327156ce017e76
SHA1

39cc06936e7876294fbd0d210b40c7d402275bb6
SHA256

eab5cc242fa6caa24cfc6510a44de1e621ac5da483ac2a23993435680fb56b2d
SHA512

e8e611e7a74f67f7697ae653944b0af52c640cf378b5cd6dd8cbbccfdcdc19e160f5d506bff4232ae2e3028c6a94bebdbb9983222faf0a79a0b8f9b678d680a3
SSDEEP

6144:AK1GrsBXmy4XfWcA9q6Dp5oJXG080Z+VpUGdm341+lUUQhyZcdOC:JKs9v4PWpDpmFi7bAQhyJC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0e06fcdc1e9caa6e5b327156ce017e76_JaffaCakes118

Files

0e06fcdc1e9caa6e5b327156ce017e76_JaffaCakes118
.exe windows:5 windows x86 arch:x86

c8234158e4c6af398a8b9989525cb694

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

Imports

kernel32

SetStdHandle
SetFilePointer
WriteConsoleW
ReadFile
FlushFileBuffers
GetConsoleCP
HeapReAlloc
IsProcessorFeaturePresent
LocalFree
HeapSize
RtlUnwind
CloseHandle
CreateConsoleScreenBuffer
GetLastError
GetStdHandle
SetConsoleMode
HeapCreate
WriteConsoleOutputA
GetConsoleWindow
ReadConsoleInputA
Sleep
GetConsoleMode
LoadLibraryW
SetConsoleActiveScreenBuffer
ReadConsoleOutputA
GetCurrentProcess
HeapAlloc
GetCommandLineW
HeapFree
GetCommandLineA
HeapSetInformation
GetStartupInfoW
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
DecodePointer
TlsFree
GetModuleHandleW
SetLastError
GetCurrentThreadId
GetProcAddress
EnterCriticalSection
LeaveCriticalSection
RaiseException
ExitProcess
WriteFile
GetModuleFileNameW
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LCMapStringW
MultiByteToWideChar
GetStringTypeW
CreateFileW

user32

ClientToScreen
ScreenToClient
TrackPopupMenu
GetSubMenu
LoadMenuA
LoadIconA
GetClientRect
GetDC
ReleaseDC
GetDesktopWindow
GetSysColor
MessageBoxW
UpdateWindow
DestroyMenu
FindWindowA
LoadCursorA
PtInRect

gdi32

PatBlt
LineTo
DeleteDC
DeleteObject
SelectObject
CreateCompatibleDC
CreateCompatibleBitmap
Rectangle
Ellipse
CreatePen
SetROP2
CreateSolidBrush
MoveToEx

shell32

CommandLineToArgvW

Sections

.text
Size: 99KB - Virtual size: 99KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 191KB - Virtual size: 240KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c8234158e4c6af398a8b9989525cb694

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

shell32

Sections

.text Size: 99KB - Virtual size: 99KB

.rdata Size: 15KB - Virtual size: 15KB

.data Size: 191KB - Virtual size: 240KB

.rsrc Size: 16KB - Virtual size: 16KB

.text
Size: 99KB - Virtual size: 99KB

.rdata
Size: 15KB - Virtual size: 15KB

.data
Size: 191KB - Virtual size: 240KB

.rsrc
Size: 16KB - Virtual size: 16KB