179542a21c51428fee17259ebe6c3b3b_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

179542a21c51428fee17259ebe6c3b3b_JaffaCakes118
Size

472KB
MD5

179542a21c51428fee17259ebe6c3b3b
SHA1

37bcfe8e79b8980c1af7b1c1f735ca67d9e0d947
SHA256

ae465b54298692e7186c27a0fb1ea90d2d92ef57ec1963c8a97e88fd78d52d4a
SHA512

748f59091299897459acbda6cbaad4ba86f6a83086d4dbb8039c09e35f3dc24655155b23808f5420e84ba8a8fcacc02289e6398670d0bfd081dabdfee93e7aef
SSDEEP

6144:r3yJHu6jdU6fkmf5jRr5NuDz9EqdvbbJrRXCNjhU037WSb25Culy7oCqARgy3OGl:2JHugeOkodHq9d+1U0rWSB7oCqB5Ef

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
179542a21c51428fee17259ebe6c3b3b_JaffaCakes118

Files

179542a21c51428fee17259ebe6c3b3b_JaffaCakes118
.exe windows:5 windows x86 arch:x86

5b18af713aacfdb9a07f23661eda028e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetActiveWindow
ShowWindow
SetActiveWindow
LoadStringA
GetFocus
LoadBitmapA
GetDesktopWindow
EnableWindow

winmm

auxGetVolume

msacm32

acmFormatSuggest

kernel32

TlsAlloc
HeapSize
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
GetLocaleInfoA
ExitProcess
CreateFileA
SignalObjectAndWait
GetTickCount
Sleep
SizeofResource
GetLastError
SetLastError
GetProcAddress
VirtualAlloc
SetComputerNameA
GetLocalTime
LoadLibraryA
CloseHandle
ResumeThread
GetCommandLineA
GetStartupInfoA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EnterCriticalSection
LeaveCriticalSection
RtlUnwind
SetHandleCount
GetStdHandle
GetFileType
DeleteCriticalSection
HeapFree
GetModuleHandleW
WriteFile
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
GetCurrentThreadId
InterlockedDecrement
HeapCreate
VirtualFree
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeCriticalSectionAndSpinCount
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapAlloc
HeapReAlloc
SetStdHandle
GetConsoleCP
GetConsoleMode
FlushFileBuffers
SetFilePointer
SetEndOfFile
GetProcessHeap
MultiByteToWideChar
ReadFile
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW

Sections

.text
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 783KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 409KB - Virtual size: 408KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5b18af713aacfdb9a07f23661eda028e

Headers

DLL Characteristics

File Characteristics

Imports

user32

winmm

msacm32

kernel32

Sections

.text Size: 44KB - Virtual size: 44KB

.rdata Size: 8KB - Virtual size: 8KB

.data Size: 9KB - Virtual size: 783KB

.rsrc Size: 409KB - Virtual size: 408KB

.text
Size: 44KB - Virtual size: 44KB

.rdata
Size: 8KB - Virtual size: 8KB

.data
Size: 9KB - Virtual size: 783KB

.rsrc
Size: 409KB - Virtual size: 408KB