261a9fbe371c8e704c94282e47c27e3b_JaffaCakes118

General

Target

261a9fbe371c8e704c94282e47c27e3b_JaffaCakes118
Size

222KB
MD5

261a9fbe371c8e704c94282e47c27e3b
SHA1

5259d0671fedc4027b6424e9a34608235d1ca335
SHA256

da45f9856788525ed1b9c933ffa34c56d199053147196fb91846be4fe3e8e8f3
SHA512

39ad983f6af20d38a5fee94821829f2e3fae827e7c70f7a31ca4a36425584bc55bb3f1d1786948903c5d37f1fc7592bf642acf5b19b79d127fa7fea4e91976ca
SSDEEP

3072:YOFLCvlWlD+p6mxu6fTUKsFaPzOHTmICX2HONer91BTh+0THw8iV2:TGWlD+oAu8wsOCJGHONiDM0TLiM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
261a9fbe371c8e704c94282e47c27e3b_JaffaCakes118

Files

261a9fbe371c8e704c94282e47c27e3b_JaffaCakes118
.exe windows:5 windows x86 arch:x86

68f24b9125068c7f6c9d08a606f28a36

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

comdlg32

GetSaveFileNameW
CommDlgExtendedError
ReplaceTextW
GetOpenFileNameW
PrintDlgExW
FindTextW
PageSetupDlgW
GetFileTitleW
ChooseFontW

kernel32

GetProcAddress
GetModuleHandleW
ExitProcess
DecodePointer
GetCommandLineA
HeapSetInformation
GetStartupInfoW
RaiseException
EncodePointer
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
GetLastError
LoadLibraryW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
WriteFile
GetStdHandle
GetModuleFileNameW
HeapFree
GetFileAttributesA
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
IsProcessorFeaturePresent
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
Sleep
HeapSize
RtlUnwind
GetExitCodeProcess
WaitForSingleObject
CloseHandle
CreateProcessA
LCMapStringW
MultiByteToWideChar
GetStringTypeW
HeapAlloc
HeapReAlloc
GetConsoleCP
GetConsoleMode
FlushFileBuffers
SetFilePointer
CompareStringW
SetEnvironmentVariableA
WriteConsoleW
SetStdHandle
CreateFileW
ReadConsoleInputA
SetConsoleMode

Sections

.text
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 148KB - Virtual size: 147KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

68f24b9125068c7f6c9d08a606f28a36

Headers

DLL Characteristics

File Characteristics

Imports

comdlg32

kernel32

Sections

.text Size: 52KB - Virtual size: 51KB

.rdata Size: 10KB - Virtual size: 10KB

.data Size: 8KB - Virtual size: 15KB

.rsrc Size: 148KB - Virtual size: 147KB

.text
Size: 52KB - Virtual size: 51KB

.rdata
Size: 10KB - Virtual size: 10KB

.data
Size: 8KB - Virtual size: 15KB

.rsrc
Size: 148KB - Virtual size: 147KB