44bd16d07eb3314c5393a9b657257eb7_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

44bd16d07eb3314c5393a9b657257eb7_JaffaCakes118
Size

89KB
MD5

44bd16d07eb3314c5393a9b657257eb7
SHA1

ac6b39ff7597f922129f3c292dbf1bc564002d4d
SHA256

59e5d8668204db7974e5bee5657c76aa0d169e32687fed35f953cf661c1688bb
SHA512

949894ddb0f387afa121e09e663ce7f05a53cb1a8208bbb9f34375c00eed399a0f347d9b85e744275c17edb2ffd1e0ad83757d10bd6c58e3c338ba69b77f85b6
SSDEEP

1536:UtkKh5BXQaAMgoooooooooooooooooooooooooooooooooooooooooozGv8Uk3GW:ikKYzr8idEalDiVbPtX5s

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
44bd16d07eb3314c5393a9b657257eb7_JaffaCakes118

Files

44bd16d07eb3314c5393a9b657257eb7_JaffaCakes118
.exe windows:5 windows x86 arch:x86

acc4ce8c6a946ec26e65445618b6faf0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

EndPaint
RedrawWindow
ReleaseDC
GetDC
SendMessageA
UnregisterClassA
GetClientRect
PtInRect
ScreenToClient
GetCursorPos
DefWindowProcA
SetWindowLongA
GetWindowLongA
CallWindowProcA
ShowWindow
DispatchMessageA
TranslateMessage
BeginPaint
IsDialogMessageA
CreateDialogParamA
CharNextA
PostQuitMessage
LoadImageA
DialogBoxParamA
GetActiveWindow
EndDialog
GetParent
SetWindowPos
MapWindowPoints
SystemParametersInfoA
GetWindowRect
GetWindow
GetSystemMetrics
CreateWindowExA
RegisterClassExA
LoadCursorA
GetClassInfoExA
PeekMessageA
wsprintfA
MessageBoxA

kernel32

SetHandleCount
GetStringTypeW
GetStringTypeA
LCMapStringW
MultiByteToWideChar
LCMapStringA
GetLocaleInfoA
HeapSize
RtlUnwind
HeapReAlloc
VirtualAlloc
HeapAlloc
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
InitializeCriticalSectionAndSpinCount
LoadLibraryA
IsDebuggerPresent
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
EnterCriticalSection
LeaveCriticalSection
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
GetCommandLineA
GetStartupInfoA
SetUnhandledExceptionFilter
GetModuleHandleW
Sleep
GetProcAddress
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
GetFileType
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapCreate
VirtualFree
HeapFree
QueryPerformanceCounter

Sections

.text
Size: 43KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

acc4ce8c6a946ec26e65445618b6faf0

Headers

DLL Characteristics

File Characteristics

Imports

user32

kernel32

Sections

.text Size: 43KB - Virtual size: 42KB

.rdata Size: 39KB - Virtual size: 39KB

.data Size: 7KB - Virtual size: 9KB

.rsrc Size: 2KB - Virtual size: 1KB

.text
Size: 43KB - Virtual size: 42KB

.rdata
Size: 39KB - Virtual size: 39KB

.data
Size: 7KB - Virtual size: 9KB

.rsrc
Size: 2KB - Virtual size: 1KB