11550947f42ecd200bbf001c5cf311a4_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

11550947f42ecd200bbf001c5cf311a4_JaffaCakes118
Size

804KB
MD5

11550947f42ecd200bbf001c5cf311a4
SHA1

1579811ac9e4394df9c59e349afc412ac1814fef
SHA256

32da4233c226d1daf4d034977016f414d499543d866402ba59aaae3ee9adec58
SHA512

d4be098655532220c3ced02d5f883e171679b0a607ed9ed7f104240f943c33b493e399b14f86b41c285dcde36965e6a823e9aebb0f0fe5075cf1410df4d5dfc2
SSDEEP

12288:qM1j7ARhy8scAw1OcUCJqhF3YtlXy0IEvTDaUo1AwAAcgx3:qM/mYt+OcR4elxImTWUoawLcY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
11550947f42ecd200bbf001c5cf311a4_JaffaCakes118

Files

11550947f42ecd200bbf001c5cf311a4_JaffaCakes118
.exe windows:5 windows x86 arch:x86

c4905dc19ed63393b637431ae237a2e5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualProtect
GetTickCount
VirtualProtect
SetLastError
lstrcmpiW
VirtualProtect
VirtualProtect
InterlockedIncrement
GetCurrentProcessId
Sleep
MultiByteToWideChar
InterlockedIncrement
CreateEventW
GetModuleHandleA
DeleteCriticalSection
GetModuleHandleW
LoadLibraryW
LeaveCriticalSection
GetVersionExA
InitializeCriticalSection
CreateThread
GetCurrentProcessId
lstrcmpiW
GetCurrentProcess
GetModuleFileNameA
GetCurrentProcessId
HeapDestroy
InterlockedCompareExchange
GetVersionExA
FreeLibrary
CreateEventW
GetTickCount
GetCurrentThreadId
GetLastError
GetModuleFileNameA
FreeLibrary
MultiByteToWideChar
GetModuleHandleA
QueryPerformanceCounter
InterlockedIncrement
lstrcmpiW
QueryPerformanceCounter
FreeLibrary
VirtualProtect
InterlockedCompareExchange
VirtualProtect
LoadLibraryA
VirtualProtect
HeapDestroy
lstrlenA
HeapDestroy
GetModuleFileNameA
GetVersionExA
InterlockedIncrement
LoadLibraryW
QueryPerformanceCounter
Sleep
LoadLibraryA
CloseHandle
MultiByteToWideChar
GetModuleFileNameA
lstrlenA
InterlockedDecrement
UnhandledExceptionFilter
GetLastError
GetTickCount
GetModuleFileNameW
GetProcAddress
DisableThreadLibraryCalls
InterlockedExchange
LocalFree
ReadFile
GetModuleHandleW
CreateThread
GetModuleHandleW
DeleteCriticalSection
lstrlenA
lstrcmpiW
lstrlenA
GetModuleHandleW
CloseHandle
GetProcAddress
SetLastError
GetModuleFileNameW
HeapAlloc
VirtualProtect
CreateFileW
GetCurrentProcessId
MultiByteToWideChar

user32

PostQuitMessage
GetWindowRect
EnableWindow
GetParent
GetDesktopWindow
LoadStringW
PostMessageW
TranslateMessage
BeginPaint
IsDlgButtonChecked
SetWindowLongW
CreateWindowExW
InvalidateRect
TranslateMessage
GetDlgItem
SetWindowTextW
SendDlgItemMessageW
SetWindowLongW
ShowWindow
IsWindow
EndDialog
MessageBoxW
InvalidateRect
CharNextW
LoadStringW
SetDlgItemTextW
PeekMessageW
PostQuitMessage
GetSysColor
LoadStringW
CreateWindowExW
SendMessageW
IsDlgButtonChecked
SetWindowPos
BeginPaint
SetWindowPos
GetSysColor
MessageBoxW
BeginPaint
EndDialog
BeginPaint
SetTimer
SetWindowTextW
PeekMessageW
BeginPaint
EndDialog
GetDesktopWindow
LoadStringW
LoadIconW
SetForegroundWindow
IsDlgButtonChecked
InvalidateRect
SetWindowLongW
KillTimer
SetDlgItemTextW
GetWindowLongW
DefWindowProcW
PostMessageW
PeekMessageW
GetWindowRect
PostQuitMessage
SetDlgItemTextW
IsWindow
SetWindowLongW
LoadIconW
BeginPaint
SetCursor
SetCursor
IsWindow
wsprintfA
SetWindowTextW
EndDialog
CreateWindowExW
wsprintfA
SetTimer
DefWindowProcW
BeginPaint
IsDlgButtonChecked
TranslateMessage
GetDesktopWindow
ReleaseDC
GetDC
GetWindowLongW
PostQuitMessage
IsWindow
SetDlgItemTextW
SetWindowPos
GetSystemMetrics

Sections

.text
Size: 717KB - Virtual size: 968KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 82KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c4905dc19ed63393b637431ae237a2e5

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

Sections

.text Size: 717KB - Virtual size: 968KB

.data Size: - Virtual size: 4KB

.rdata Size: 4KB - Virtual size: 8KB

.rsrc Size: 82KB - Virtual size: 84KB

.text
Size: 717KB - Virtual size: 968KB

.data
Size: - Virtual size: 4KB

.rdata
Size: 4KB - Virtual size: 8KB

.rsrc
Size: 82KB - Virtual size: 84KB