36c1ddea3ed02cf498f34d8955006eaa_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

36c1ddea3ed02cf498f34d8955006eaa_JaffaCakes118
Size

807KB
MD5

36c1ddea3ed02cf498f34d8955006eaa
SHA1

f7dc61fd7039c455d787fae6cb67b61b9fb9d0b4
SHA256

519fb50d2f09ee551cade5fad9a8c412ff867bba3e8c925b076864a62e0a07e3
SHA512

5f154e372828df373a91aebce7bf3dc58523179dbd4647765ef61d2e9a9147a713ba418c462ffb871d95a600b36a6ff4d40c356a113034a580c7cb2ba7bc236c
SSDEEP

12288:R/5mzQzYFsKCjLn3PwzKG+nZ6fdZlFrIlDG968EInoQhBEm8gxP:R/5mNsKCj7PQK0vvADG968xlx84

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
36c1ddea3ed02cf498f34d8955006eaa_JaffaCakes118

Files

36c1ddea3ed02cf498f34d8955006eaa_JaffaCakes118
.exe windows:5 windows x86 arch:x86

c71de2970ee806149378746f50f277bc

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualProtect
VirtualAlloc
VirtualProtect
GetLastError
VirtualAlloc
Sleep
GetLastError
GetTickCount
HeapDestroy
CreateFileW
ReadFile
InterlockedCompareExchange
GetCurrentProcess
UnhandledExceptionFilter
GetModuleHandleW
GetModuleFileNameW
GetSystemTimeAsFileTime
InterlockedIncrement
LocalAlloc
InterlockedExchange
InterlockedExchange
GetCurrentThreadId
GetModuleHandleA
GetCurrentProcess
QueryPerformanceCounter
GetModuleHandleA
VirtualAlloc
MultiByteToWideChar
HeapFree
CreateThread
GetCurrentProcessId
DeleteCriticalSection
LocalFree
DeleteCriticalSection
HeapDestroy
InterlockedDecrement
Sleep
HeapFree
DisableThreadLibraryCalls
UnhandledExceptionFilter
DisableThreadLibraryCalls
GetLastError
LoadLibraryW
DeleteCriticalSection
LoadLibraryA
GetProcAddress
GetModuleHandleA
EnterCriticalSection
HeapFree
GetVersionExA
lstrlenA
CreateThread
lstrlenA
CreateEventW
CreateEventW
EnterCriticalSection
LeaveCriticalSection
CreateEventW
FreeLibrary
InterlockedIncrement
LoadLibraryW
LoadLibraryW
Sleep
HeapFree
CreateFileW
DisableThreadLibraryCalls
EnterCriticalSection
LocalAlloc
ReadFile
InterlockedCompareExchange
InterlockedDecrement
VirtualProtect
GetCurrentProcessId
MultiByteToWideChar
LocalFree
GetModuleHandleA
ReadFile
GetModuleHandleW
InterlockedDecrement
CreateFileW
GetCurrentProcess
GetVersionExA
ReadFile
DisableThreadLibraryCalls
SetLastError
QueryPerformanceCounter
InterlockedCompareExchange
SetLastError
LocalFree
SetLastError
HeapFree
Sleep
VirtualProtect
GetLastError
GetVersionExA
GetModuleHandleA
GetCurrentThreadId
lstrlenA
LoadLibraryW
GetCurrentThreadId
GetModuleHandleA
GetModuleHandleA
SetLastError
GetLastError

user32

SetTimer
KillTimer
GetDesktopWindow
wsprintfA
SetWindowTextW
GetWindowRect
GetDC
GetDC
BeginPaint
PostQuitMessage
CharNextW
BeginPaint
PeekMessageW
GetDlgItem
SetWindowTextW
LoadIconW
GetClientRect
SetWindowTextW
SetWindowTextW
LoadCursorW
EndDialog
SendDlgItemMessageW
SetWindowPos
PostQuitMessage
CharNextW
GetWindowLongW
IsWindow
GetFocus
PostMessageW
SetWindowPos
EnableWindow
GetDesktopWindow
IsDlgButtonChecked
PostQuitMessage
GetDlgItem
GetClientRect
LoadCursorW
MessageBoxW
SendDlgItemMessageW
EndDialog
GetParent
PostMessageW
SetCursor
SendDlgItemMessageW
GetSysColor
wsprintfA
LoadIconW
PeekMessageW
ShowWindow
BeginPaint
PostMessageW
SetWindowLongW
SetWindowTextW
SendMessageW
DestroyWindow
GetDC
LoadStringW
GetWindowRect
SetWindowLongW
LoadStringW
MessageBoxW
GetDlgItem
CreateWindowExW
SetWindowPos
PostQuitMessage
InvalidateRect
DefWindowProcW
GetDlgItem
ShowWindow
GetClientRect
LoadStringW
IsDlgButtonChecked
SendMessageW
DefWindowProcW
PostMessageW
GetWindowLongW
EnableWindow
GetDesktopWindow
KillTimer
IsWindow
EndDialog
SetFocus
EndPaint
SetWindowPos
ShowWindow
ShowWindow
PeekMessageW
SetWindowPos
SendMessageW
BeginPaint
EndDialog
GetSystemMetrics
GetSysColor
LoadStringW
ShowWindow
GetDC
DestroyWindow
SetWindowTextW
PostQuitMessage
KillTimer
LoadIconW
SetWindowTextW
SetFocus
SetCursor
DefWindowProcW
DefWindowProcW
LoadStringW
BeginPaint
SetDlgItemTextW

Sections

.text
Size: 718KB - Virtual size: 968KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 82KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c71de2970ee806149378746f50f277bc

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

Sections

.text Size: 718KB - Virtual size: 968KB

.data Size: - Virtual size: 4KB

.rdata Size: 5KB - Virtual size: 8KB

.rsrc Size: 82KB - Virtual size: 84KB

.text
Size: 718KB - Virtual size: 968KB

.data
Size: - Virtual size: 4KB

.rdata
Size: 5KB - Virtual size: 8KB

.rsrc
Size: 82KB - Virtual size: 84KB