12812a822862fcec0a2feed78bb3fd8f_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

12812a822862fcec0a2feed78bb3fd8f_JaffaCakes118
Size

243KB
MD5

12812a822862fcec0a2feed78bb3fd8f
SHA1

1069de840616deef4a57d523fef8e86901342acc
SHA256

198172e7c4835901bfb5435f50da7a497a145cd9ab9255ab5f43e50acfcfdecc
SHA512

f922439029f8a8f4b380b931dd8ea9ead9fed389f4225662089eaac59c09173d4e9994cb1fec359d85d768ab53b43f87c8cc439d83cab85848d7765b5eb3700b
SSDEEP

3072:quxZ08WcTkkCAG5DqZOS0HnOmn+MYgkgeHX+9w6B9XZP+FFA2iHcGBB3Cb+n2OT9:1qcTkkC6ZR0H7+NZ6BL+F/OBTn269

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
12812a822862fcec0a2feed78bb3fd8f_JaffaCakes118

Files

12812a822862fcec0a2feed78bb3fd8f_JaffaCakes118
.exe windows:5 windows x86 arch:x86

6fab4b23ae171e96b4199c029b109a84

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

DestroyWindow
UpdateWindow
SendDlgItemMessageA
SetWindowTextA
EndDialog
GetDlgItem
GetWindowTextA
SendMessageA
GetDesktopWindow
GetWindowRect
GetClientRect
SetWindowPos
DialogBoxParamA
MessageBoxA
wsprintfA

shell32

SHBrowseForFolderA
SHGetPathFromIDListA

kernel32

HeapFree
HeapSize
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
MultiByteToWideChar
UnmapViewOfFile
GetSystemInfo
MapViewOfFile
DeleteFileA
CopyFileA
SetEndOfFile
SetFilePointer
FlushViewOfFile
GetLocalTime
GetTempPathA
GetFileSize
GetVersionExA
CloseHandle
OpenSemaphoreA
LocalFree
OpenFileMappingA
lstrcatA
lstrcpyA
LocalAlloc
lstrlenA
OpenEventA
CreateEventA
CreateFileMappingA
CreateFileA
GetProcAddress
GetModuleHandleA
CreateThread
Sleep
CreateProcessA
GetModuleFileNameA
SetFileAttributesA
GetFileAttributesA
GetLastError
CreateDirectoryA
GetTickCount
WritePrivateProfileSectionA
GetPrivateProfileSectionA
GetWindowsDirectoryA
GetShortPathNameA
MoveFileExA
SetEvent
LoadLibraryA
GetCommandLineA
GetStartupInfoA
HeapCreate
VirtualFree
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
HeapAlloc
VirtualAlloc
HeapReAlloc
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
ExitProcess
WriteFile
GetStdHandle
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeCriticalSectionAndSpinCount
RtlUnwind
LCMapStringA

Sections

.text
Size: 62KB - Virtual size: 61KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6fab4b23ae171e96b4199c029b109a84

Headers

DLL Characteristics

File Characteristics

Imports

user32

shell32

kernel32

Sections

.text Size: 62KB - Virtual size: 61KB

.rdata Size: 19KB - Virtual size: 19KB

.data Size: 4KB - Virtual size: 7KB

.rsrc Size: 6KB - Virtual size: 5KB

.text
Size: 62KB - Virtual size: 61KB

.rdata
Size: 19KB - Virtual size: 19KB

.data
Size: 4KB - Virtual size: 7KB

.rsrc
Size: 6KB - Virtual size: 5KB