52b76e23d0fa417f17f11a434a5615c1_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

52b76e23d0fa417f17f11a434a5615c1_JaffaCakes118
Size

1012KB
MD5

52b76e23d0fa417f17f11a434a5615c1
SHA1

0d4929eeac40a44c73f1f652be35cf7c18772169
SHA256

d1ac4115c2bd973cd30efc4348963de78117a706dc0c694a143db39a1298b325
SHA512

2ef8cd8c5bdd8c4dc9ce58f72a8b9496f6743fbf7ad56ba43a6dc38ae980ef41f7fc311e2a6d6749c8e980b8c1bb7a238a344b83af67861695ee0a9c9c38c4fd
SSDEEP

3072:q1oMnvXJVCspYwU7pC8dqA3/pXIS5EnmHAzRvmqSBYRkf6I:SXDCgU7pLdv3/p4CEnmHAzRvNa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
52b76e23d0fa417f17f11a434a5615c1_JaffaCakes118

Files

52b76e23d0fa417f17f11a434a5615c1_JaffaCakes118
.dll windows:4 windows x86 arch:x86

d0e5c4dd3b55271b70ffe7085f70d0f1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

EnterCriticalSection
GetProcessHeap
CreateEventA
GetCurrentProcessId
IsBadReadPtr
GetDateFormatA
GetModuleHandleA
lstrlenW
FormatMessageA
DeleteFileA
lstrcpyA
GetVersionExA
GetStdHandle
GetLocaleInfoA
GetCurrentProcess
LoadLibraryA
EnumCalendarInfoA
VirtualAlloc
FreeLibrary
GetLastError
GetStringTypeA
GetVersion
GetThreadLocale
WideCharToMultiByte
SetFilePointer
GetEnvironmentStrings
LoadLibraryExA
LocalAlloc
WaitForSingleObject
IsBadHugeReadPtr
GlobalAlloc
VirtualFree
SetErrorMode
GetTickCount
GetModuleHandleW
ExitProcess
LoadResource
GetCommandLineW
FindFirstFileA
DeleteCriticalSection
lstrcmpA
GetProcAddress
InitializeCriticalSection
VirtualAllocEx
GlobalDeleteAtom
GetOEMCP
HeapDestroy
LockResource
WriteFile
GetFileSize
ReadFile
GetCurrentThreadId

gdi32

GetDIBColorTable

comctl32

ImageList_Draw
ImageList_Remove
ImageList_DrawEx
ImageList_Add
ImageList_GetBkColor

user32

SetRect
SetPropA
SetParent
IsDlgButtonChecked
SetScrollPos
SetMenuItemInfoA
GetMenu
GetTopWindow
SetScrollInfo
CreateMenu

Exports

Exports

_j52M1
_BPT_eBMqDLr@16
3dhKy@20
_twlxWn_sAMw@4
hk4nV
sc_IN6on
EStHNZNrmU3@12
cqqAySNDn
rs_CWyoRrqU@4
JNgte@20
_gOqcltRgGgT
uZow1KuDF
_T96plCbOFmLO
_I0zNAdks2JWVuT@4
bW5gfLZQWy@4
DdhAg@12
_Gto9EDm@8
_4AUxwtUArI1
X5SnQyPbi@4
SbREKRv8qT@24
_pxXIEe049GM_@24
_WN_aM@24
_1q9mkN4hZ@16
VAymXsw9
_dhTiRg4@16
_8SC_OtY4vip@4
_e9TX9PZkZKLRe2@8
DHhpVK1_X@20
_DZ7mJi
_bLLGKCQQaipu@8
rZLtvMHBfL
TbYo9
_QsmDTrTiIvp
_GPDptv9qs7wi@20
0tSB9z@16
npjKLDg5h5
0GgWXtm2@20
_MhXVn@4
_Ng2nZ@20
aLqMqD1vDD@24
P0Ut35
bMcJytnrL@24
_DbgH_Q@8
_RxPDRKk1y7q@20
b6xTGUR9@12
_MOsjXeupSkhsS4
_niKQWEZqH_f2a
_xkWJJaCLVPsm5
sN3OfM@16
_WjmvxgT8X3m6y
_aXp0qT9AceCu
k9N4f8oSg6eSw
_cYsfkWKxLCNo@16
_Bg5rDgDgki4s@24
_J2NakH62pAk
PAN0RAyLyGI6
_2hnzB66
86xYMIY
dZBKKfv_4
5Pz2xKjIGPQ@4
astZrID0Fwdt@12
FIQ0Yq@12
lX3mBS_@20
crTCaI40m
_n96cXJA1eU@4

Sections

CODE
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.DATA
Size: 809KB - Virtual size: 808KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.kldata
Size: 169KB - Virtual size: 169KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d0e5c4dd3b55271b70ffe7085f70d0f1

Headers

File Characteristics

Imports

kernel32

gdi32

comctl32

user32

Exports

Exports

Sections

CODE Size: 12KB - Virtual size: 12KB

.DATA Size: 809KB - Virtual size: 808KB

.kldata Size: 169KB - Virtual size: 169KB

.idata Size: 2KB - Virtual size: 1KB

.edata Size: 1KB - Virtual size: 1KB

.rsrc Size: 14KB - Virtual size: 13KB

.reloc Size: 2KB - Virtual size: 1KB

CODE
Size: 12KB - Virtual size: 12KB

.DATA
Size: 809KB - Virtual size: 808KB

.kldata
Size: 169KB - Virtual size: 169KB

.idata
Size: 2KB - Virtual size: 1KB

.edata
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 14KB - Virtual size: 13KB

.reloc
Size: 2KB - Virtual size: 1KB