2697778969a7aba4ed0c837ded390486_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

2697778969a7aba4ed0c837ded390486_JaffaCakes118
Size

76KB
MD5

2697778969a7aba4ed0c837ded390486
SHA1

0236eb41b6c68b0338b5291a780cd8716526fcc4
SHA256

0e31be033b356af97cde36c0080a97fc6c82fbb69010b3f463100d75ae99becd
SHA512

4eb4ec4b0f7fb6ee02261f6d1376eca44466d7171cd936219b63fb229100127ce49fca0265a922a6a875f6a82e7c02d4498299c9194802c4069d8219d2ebee2a
SSDEEP

1536:hO3HCJBVOSlKeCM6lHz4bcM8yFPfwykn9aE0JCE3:M3HCZOSlKeCtHMQM8WfS9aE0L

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2697778969a7aba4ed0c837ded390486_JaffaCakes118

Files

2697778969a7aba4ed0c837ded390486_JaffaCakes118
.exe windows:5 windows x86 arch:x86

50a9bf3c754d3bff3a270d4eaedd06d8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
lstrlenW
LeaveCriticalSection
EnterCriticalSection
FindResourceW
SizeofResource
LockResource
LoadResource
GlobalAlloc
GlobalLock
InterlockedExchange
GetVersionExW
IsWow64Process
OpenProcess
Sleep
GetExitCodeProcess
WaitForSingleObject
CreateProcessW
GetModuleHandleW
CreateFileW
ReadFile
GetSystemTime
GetStringTypeW
MultiByteToWideChar
LCMapStringW
WideCharToMultiByte
HeapReAlloc
IsProcessorFeaturePresent
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
RtlUnwind
HeapSize
GetCurrentProcessId
QueryPerformanceCounter
VirtualFree
VirtualProtect
VirtualAlloc
CreateThread
GetTickCount
SetThreadPriority
SetPriorityClass
GetShortPathNameA
WriteFile
GetModuleFileNameW
CloseHandle
GetCurrentProcess
TerminateProcess
DeleteFileW
GetProcAddress
GetLastError
LoadLibraryW
CreateMutexA
ReleaseMutex
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
HeapCreate
GetStdHandle
ExitProcess
InterlockedDecrement
GetCurrentThreadId
SetLastError
InterlockedIncrement
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
DecodePointer
EncodePointer
GetStartupInfoW
HeapSetInformation
GetCommandLineW
HeapFree
VirtualQuery
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
GetSystemTimeAsFileTime
HeapAlloc
GetSystemInfo
RaiseException

user32

LoadAcceleratorsW
GetMessageW
TranslateAcceleratorW
TranslateMessage
DispatchMessageW
LoadIconW
SystemParametersInfoW
RegisterClassExW
GetSystemMetrics
CreateWindowExW
SetCursor
GetSysColorBrush
EndPaint
BeginPaint
GetWindowTextW
LoadCursorW
DefWindowProcW
SetWindowTextW

gdi32

GetObjectW
CreateCompatibleDC
SetDIBColorTable
DeleteDC
LineTo
MoveToEx
CreatePen
TextOutW
SelectObject
BitBlt
CreateFontA
DeleteObject
SetBkMode
SetTextColor
CreateFontW
CreateDIBSection

advapi32

AdjustTokenPrivileges

shell32

ShellExecuteExA

shlwapi

StrCpyW
StrCmpW

psapi

EnumProcesses

gdiplus

GdiplusStartup
GdipCreateBitmapFromStream
GdipGetImagePixelFormat
GdiplusShutdown
GdipDrawImageI
GdipDeleteGraphics
GdipGetImageGraphicsContext
GdipDisposeImage
GdipFree
GdipAlloc
GdipCloneImage
GdipCreateBitmapFromScan0
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImageWidth
GdipGetImageHeight

Sections

.text
Size: 45KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

50a9bf3c754d3bff3a270d4eaedd06d8

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

shlwapi

psapi

gdiplus

Sections

.text Size: 45KB - Virtual size: 44KB

.rdata Size: 14KB - Virtual size: 13KB

.data Size: 3KB - Virtual size: 7KB

.rsrc Size: 7KB - Virtual size: 6KB

.reloc Size: 5KB - Virtual size: 5KB

.text
Size: 45KB - Virtual size: 44KB

.rdata
Size: 14KB - Virtual size: 13KB

.data
Size: 3KB - Virtual size: 7KB

.rsrc
Size: 7KB - Virtual size: 6KB

.reloc
Size: 5KB - Virtual size: 5KB