0ee19d3a783e06fcb0ca8ca8dba27963_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

0ee19d3a783e06fcb0ca8ca8dba27963_JaffaCakes118
Size

24KB
MD5

0ee19d3a783e06fcb0ca8ca8dba27963
SHA1

828dacd1054b7b5540cc361ec529a9ed3e4c34b4
SHA256

d2c6da2631ba00a383ce06161dad09c4015b4cba4956fcbb22a1a9d1530e324e
SHA512

631bc06875d4963c3cfe19e5ad35522559fa0b1f2d865039ce8f74b4574d9db4e2563d55d47758fa5957cf3e9d1f9929f95326ed737808aa8c8d5114b7b9af4e
SSDEEP

384:w0J/f4/8ldN7KQ3Tb9Fl0By4zuXiig97+W9aI5jVKavcUqls7MMrBJFR:wIf4/8p3Ph0I4uXEcI5h9vcxq7MqB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0ee19d3a783e06fcb0ca8ca8dba27963_JaffaCakes118

Files

0ee19d3a783e06fcb0ca8ca8dba27963_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c7aae473ecde6bd4228f2dc373e8455c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

cscdll

CSCPinFileW

activeds

FreeADsMem

msvcrt

_wcsdup
wcstok
free

kernel32

GetModuleHandleA
QueryPerformanceCounter
GetSystemTimeAsFileTime
LocalReAlloc
GetACP
VirtualAlloc
GetCurrentThreadId
LocalAlloc
GetCurrentProcessId
SetUnhandledExceptionFilter
MulDiv
TerminateProcess
Sleep
GetProcAddress
GetLastError

user32

RegisterClassW
CreateWindowExW
GetDC
DrawFocusRect
GetWindowLongW
EndDialog
SetFocus
ReleaseDC
EndDeferWindowPos
GetClientRect
SendMessageW
GetDlgCtrlID
SetWindowPos
BeginDeferWindowPos
SetWindowLongW
GetSysColor
IsDlgButtonChecked
DialogBoxParamW
GetSystemMetrics
GetParent
GetDlgItem
LoadCursorW
DeferWindowPos
CheckDlgButton
EndPaint
RedrawWindow
UnregisterClassW
DefWindowProcW
SetRect
BeginPaint

gdi32

CreatePen
GetStockObject
SetROP2
DeleteObject
SelectObject
ExtTextOutW
SetBkColor
TranslateCharsetInfo
SetTextColor
CreateFontIndirectW
SetTextAlign
Polyline
GetDeviceCaps
GetTextMetricsW

Sections

.textbss
Size: - Virtual size: 96KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 512B - Virtual size: 432B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

c7aae473ecde6bd4228f2dc373e8455c

Headers

File Characteristics

Imports

cscdll

activeds

msvcrt

kernel32

user32

gdi32

Sections

.textbss Size: - Virtual size: 96KB

.idata Size: 2KB - Virtual size: 1KB

.text Size: 512B - Virtual size: 432B

.rdata Size: 20KB - Virtual size: 20KB

.rsrc Size: 512B - Virtual size: 6KB

.textbss
Size: - Virtual size: 96KB

.idata
Size: 2KB - Virtual size: 1KB

.text
Size: 512B - Virtual size: 432B

.rdata
Size: 20KB - Virtual size: 20KB

.rsrc
Size: 512B - Virtual size: 6KB