14f59bb68f75299fc88b75e23618ab33_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

14f59bb68f75299fc88b75e23618ab33_JaffaCakes118
Size

160KB
MD5

14f59bb68f75299fc88b75e23618ab33
SHA1

96291967b2f3722c1793c2d5096bd60b0334c054
SHA256

85d5b12fd0bbb8c6c3a152913ae510f6d24d4f9e59ad3f730f791e786c582a3c
SHA512

c831bcf71fc140a473904c42c3d7d81613aa0be7cabd7b3a8639b86ade49ae73c6b22c8660b1bd07ddb748a1a235112c13a9327a334c71e729ecdfad57f63439
SSDEEP

3072:3SRcd9sBvDr35F+HZHR2rqXyywkkXn9kP8R7nkutWhBPycefC7Sn3LtWw:CR8mB7tF+GqX7wV9k8nPkPwKenbU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
14f59bb68f75299fc88b75e23618ab33_JaffaCakes118

Files

14f59bb68f75299fc88b75e23618ab33_JaffaCakes118
.exe windows:5 windows x86 arch:x86

cafd12d1329d56653397a2428f0fb32b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msi

ord103

user32

CloseWindow
GetForegroundWindow
GetWindowTextLengthA
GetDesktopWindow

kernel32

GetUserDefaultLCID
EnumSystemLocalesA
GetStdHandle
GetEnvironmentStrings
GetCommandLineA
VirtualAlloc
IsDebuggerPresent
GetTickCount
GetTimeZoneInformation
GetPriorityClass
CreateEventA
GetVersionExA
GetCurrentProcessId
CreateSemaphoreA
GetProcAddress
GetCurrentThread
GetModuleHandleA
GetLocaleInfoW
CompareStringA
CompareStringW
GetEnvironmentStringsW
TlsSetValue
GetStartupInfoA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
SetHandleCount
GetFileType
DeleteCriticalSection
GetCurrentThreadId
SetEnvironmentVariableA
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
FatalAppExitA
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
HeapReAlloc
IsBadWritePtr
LoadLibraryA
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
InterlockedDecrement
InterlockedIncrement
Sleep
IsValidLocale
IsValidCodePage
GetLocaleInfoA

gdi32

AbortDoc
GetRasterizerCaps
SetTextAlign
GetTextColor

Sections

.text
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 111KB - Virtual size: 195KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 616B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

cafd12d1329d56653397a2428f0fb32b

Headers

DLL Characteristics

File Characteristics

Imports

msi

user32

kernel32

gdi32

Sections

.text Size: 41KB - Virtual size: 41KB

.rdata Size: 6KB - Virtual size: 5KB

.data Size: 111KB - Virtual size: 195KB

.rsrc Size: 1024B - Virtual size: 616B

.text
Size: 41KB - Virtual size: 41KB

.rdata
Size: 6KB - Virtual size: 5KB

.data
Size: 111KB - Virtual size: 195KB

.rsrc
Size: 1024B - Virtual size: 616B