37b5d4fc996bc84269d03ab2d4355ea2_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

37b5d4fc996bc84269d03ab2d4355ea2_JaffaCakes118
Size

822KB
MD5

37b5d4fc996bc84269d03ab2d4355ea2
SHA1

03c245a71815c9bbe001545705ce41cc7508eeb5
SHA256

7ba88881d1284c6ea0c4e73ac77af893cb8266bf5279f794d3468d0d00fbd9cb
SHA512

11efe09abfeff901523c34fdde584e2c156bdc9e9b55a1729a55785942f8f5315181a8e557fe1e75080d5c8279214e17280a255a580577a339cfbf03c4b06e50
SSDEEP

12288:rcS5lOXPVo9KEmDy15S31Lp+LFr+8RHIO38cwgx9:rc4oVo0beTSpsTR8Be

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
37b5d4fc996bc84269d03ab2d4355ea2_JaffaCakes118

Files

37b5d4fc996bc84269d03ab2d4355ea2_JaffaCakes118
.exe windows:5 windows x86 arch:x86

37ebf506ac22acf1f7b2649091f21837

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualProtect
VirtualProtect
CreateEventW
VirtualProtect
InterlockedCompareExchange
MultiByteToWideChar
GetLastError
Sleep
CloseHandle
GetModuleFileNameW
HeapAlloc
HeapAlloc
CreateFileW
GetProcessHeap
CreateFileW
GetCurrentProcess
InitializeCriticalSection
EnterCriticalSection
LoadLibraryA
DisableThreadLibraryCalls
SetLastError
ReadFile
CreateFileW
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryW
LoadLibraryW
GetCurrentThreadId
lstrcmpiW
LeaveCriticalSection
GetCurrentThreadId
GetCurrentProcessId
HeapDestroy
LeaveCriticalSection
MultiByteToWideChar
LocalAlloc
LocalFree
LeaveCriticalSection
LoadLibraryW
QueryPerformanceCounter
VirtualProtect
GetModuleHandleA
GetVersionExA
LoadLibraryW
FreeLibrary
EnterCriticalSection
GetVersionExA
GetSystemTimeAsFileTime
LoadLibraryA
VirtualProtect
GetCurrentThreadId
CreateFileW
LoadLibraryA
SetLastError
HeapFree
GetCurrentThreadId
LoadLibraryW
GetSystemTimeAsFileTime
InterlockedCompareExchange
EnterCriticalSection
ReadFile
LocalAlloc
Sleep
UnhandledExceptionFilter
HeapFree
InterlockedDecrement
VirtualAlloc
ReadFile
LoadLibraryW
InterlockedCompareExchange
CreateEventW
GetModuleFileNameA
InterlockedDecrement
GetLastError
LeaveCriticalSection
LoadLibraryA
GetCurrentProcess
EnterCriticalSection
GetLastError
LocalFree
GetModuleFileNameW
GetProcessHeap
LeaveCriticalSection
GetCurrentThreadId
GetCurrentProcess
MultiByteToWideChar
GetVersionExA
QueryPerformanceCounter
MultiByteToWideChar
CreateThread
LoadLibraryW
QueryPerformanceCounter
VirtualAlloc
VirtualAlloc
GetModuleHandleW
DeleteCriticalSection
GetCurrentProcessId
InterlockedCompareExchange
GetCurrentProcessId
GetProcessHeap
CreateFileW
InterlockedDecrement
lstrlenA

user32

LoadCursorW
KillTimer
SetDlgItemTextW
GetParent
PeekMessageW
PeekMessageW
PostQuitMessage
LoadCursorW
BeginPaint
BeginPaint
InvalidateRect
SendMessageW
DefWindowProcW
PeekMessageW
PeekMessageW
PostMessageW
PostQuitMessage
GetClientRect
SendMessageW
LoadStringW
ReleaseDC
KillTimer
CharNextW
LoadStringW
SendDlgItemMessageW
GetDesktopWindow
TranslateMessage
TranslateMessage
SetWindowTextW
BeginPaint
SetForegroundWindow
EnableWindow
GetWindowRect
IsDlgButtonChecked
GetFocus
KillTimer
DispatchMessageW
SetDlgItemTextW
GetSystemMetrics
GetFocus
SetWindowPos
PostMessageW
SetWindowTextW
GetSysColor
GetFocus
InvalidateRect
GetWindowRect
DispatchMessageW
CharNextW
PostMessageW
SetTimer
CreateWindowExW
BeginPaint
GetClientRect
ShowWindow
PostMessageW
DestroyWindow
IsDlgButtonChecked
GetFocus
SetCursor
GetFocus
DialogBoxParamW
GetWindowRect
wsprintfA
IsWindow
SendMessageW
GetSysColor
GetClientRect
SendMessageW
GetDesktopWindow
PeekMessageW
BeginPaint
BeginPaint
CreateWindowExW
SetForegroundWindow
IsWindow
SetWindowPos
ReleaseDC
TranslateMessage
MessageBoxW
PostQuitMessage
DefWindowProcW
SetWindowLongW
SetForegroundWindow
SendDlgItemMessageW
GetSystemMetrics
SendMessageW
CharNextW
EndDialog
DispatchMessageW
SetWindowLongW
GetDlgItem
GetWindowLongW
DispatchMessageW
SetFocus
GetDesktopWindow
SetDlgItemTextW
EndDialog
LoadIconW
EnableWindow
BeginPaint
EnableWindow
GetWindowRect
DestroyWindow

Sections

.text
Size: 733KB - Virtual size: 992KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 82KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

37ebf506ac22acf1f7b2649091f21837

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

Sections

.text Size: 733KB - Virtual size: 992KB

.data Size: - Virtual size: 4KB

.rdata Size: 5KB - Virtual size: 8KB

.rsrc Size: 82KB - Virtual size: 84KB

.text
Size: 733KB - Virtual size: 992KB

.data
Size: - Virtual size: 4KB

.rdata
Size: 5KB - Virtual size: 8KB

.rsrc
Size: 82KB - Virtual size: 84KB