3c66676092103b23ae84368e10544860_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

3c66676092103b23ae84368e10544860_JaffaCakes118
Size

127KB
MD5

3c66676092103b23ae84368e10544860
SHA1

dc195cb1923e72c8208787b7680b5da3d92e9003
SHA256

cde3969526fdbd4c5aea16fcee6e1c5b02f5a8411db70025b56af0688ee3381d
SHA512

0f56be0417dff0b051bc6d82e0d24019cb8f57706ad78aad300af3824938dbc4e6ae3f92728586b725a300d6b2416ec1fe927c23a9f7e45f48735ed9742cc58f
SSDEEP

1536:G4hmVZJGrULGYUN+Cis/y8Oow6I4kiMOkE5nABufSmXF0gWefUBnui9qY/auupLC:DSZJGrhYw+CPq8Tr0ufSmXn5fEnTx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3c66676092103b23ae84368e10544860_JaffaCakes118

Files

3c66676092103b23ae84368e10544860_JaffaCakes118
.exe windows:5 windows x86 arch:x86

9292e562fe9fec1bbc50b81e5742b187

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapCreate
SetConsoleTitleA
GlobalUnlock
CreateDirectoryA
GetProcAddress
LoadLibraryA
GetModuleHandleA
CloseHandle
SetStdHandle
WriteConsoleW
Sleep
ReadFile
GetStringTypeW
LCMapStringW
FlushFileBuffers
GetConsoleMode
GetConsoleCP
HeapReAlloc
HeapSize
MultiByteToWideChar
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
RtlUnwind
GetSystemTimeAsFileTime
GetCommandLineA
GetCurrentProcess
lstrlenA
GetFileSize
SetFilePointer
CreateFileA
GetLastError
HeapFree
HeapAlloc
GetModuleHandleW
ExitProcess
DecodePointer
HeapSetInformation
GetStartupInfoW
RaiseException
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
WriteFile
GetStdHandle
GetModuleFileNameW
EncodePointer
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
LoadLibraryW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
CreateFileW

user32

DestroyWindow
GetMessageA
SendDlgItemMessageA
LoadIconA
GetClientRect
SendMessageA
GetDC
TranslateMessage
GetMenu
MessageBoxA
CreateWindowExA
SetWindowPos
LoadAcceleratorsA
GetMenuItemCount
PostMessageA
CreateWindowExW
DispatchMessageA
FindWindowA
GetDlgItemTextA
RegisterClassA

comctl32

GetMUILanguage

Sections

.text
Size: 58KB - Virtual size: 57KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 36KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

9292e562fe9fec1bbc50b81e5742b187

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

comctl32

Sections

.text Size: 58KB - Virtual size: 57KB

.rdata Size: 13KB - Virtual size: 13KB

.data Size: 36KB - Virtual size: 43KB

.rsrc Size: 19KB - Virtual size: 20KB

.text
Size: 58KB - Virtual size: 57KB

.rdata
Size: 13KB - Virtual size: 13KB

.data
Size: 36KB - Virtual size: 43KB

.rsrc
Size: 19KB - Virtual size: 20KB