54a7ffd88f76ee8696e7e4b97abfeeea_JaffaCakes118

General

Target

54a7ffd88f76ee8696e7e4b97abfeeea_JaffaCakes118
Size

136KB
MD5

54a7ffd88f76ee8696e7e4b97abfeeea
SHA1

a054940f1468b1bb6ca85cf8e049fd8f76bcf96a
SHA256

668e865a410e740558d1e5ed79fdb9ab746adb40b59422e1a8fda7beaf5246bd
SHA512

ae636fbdcb26d7152faf0055ddf9c96712c623c9ab4d38c2a5633614dfe4c5fbdc1f31f00fff8a3deca4da79fdb6fae488aad47186845b22b0939fa2b3d9793b
SSDEEP

1536:tluiqTzL0YXbTJNHPXVNq4zu/jQ2Yy0I7Htqn4I++GowTTEJuENIAjhqY030bXq:tpI/0sTzPl3uc6Pqn7+bowTouOjs0bXq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
54a7ffd88f76ee8696e7e4b97abfeeea_JaffaCakes118

Files

54a7ffd88f76ee8696e7e4b97abfeeea_JaffaCakes118
.dll windows:4 windows x86 arch:x86

27af94b89c4c0cb9a82157f4f3cb750a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

FrameRect

gdi32

SetWindowOrgEx
SaveDC
CreateMetaFileA
GetDeviceCaps
SetViewportOrgEx
SetMapMode
LPtoDP
CreateDCA
SetBkColor
CreateRectRgn
CreateEllipticRgnIndirect
CombineRgn
PtInRegion
GetMapMode
DPtoLP
Ellipse
GetCurrentObject
PtVisible
RectVisible
TextOutA
SetWindowExtEx
Escape
DeleteObject
GetObjectA
CreateFontIndirectA
Chord
GetTextExtentPoint32A
CreatePalette
CreateDIBitmap
RealizePalette
SelectPalette
MoveToEx
LineTo
CreatePen
GetClipBox
GetDIBits
CreateSolidBrush
CreateDIBSection
SetDIBits
CreateBitmap
SetTextColor
SetBkMode
RestoreDC
CloseMetaFile
DeleteMetaFile
StretchBlt
BitBlt
GetStockObject
SetDCBrushColor
Rectangle
SelectObject
ExtTextOutA

advapi32

RegQueryValueExA
RegDeleteValueA
RegCloseKey
RegCreateKeyExA
RegOpenKeyExA
RegSetValueExA
RegQueryInfoKeyA
RegEnumKeyExA
RegDeleteKeyA

shell32

ShellExecuteExA
SHGetSpecialFolderPathA

ole32

CoTaskMemRealloc
OleRegEnumVerbs
OleRegGetUserType
OleRegGetMiscStatus
CreateDataAdviseHolder
CoTaskMemFree
OleLoadFromStream
StringFromGUID2
OleSaveToStream
WriteClassStm
CoCreateInstance
IIDFromString
StringFromIID
CoTaskMemAlloc
CreateOleAdviseHolder

comctl32

ImageList_LoadImageA

Exports

Exports

uoruLruBr

Sections

.text
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 99KB - Virtual size: 419KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

27af94b89c4c0cb9a82157f4f3cb750a

Headers

File Characteristics

Imports

user32

gdi32

advapi32

shell32

ole32

comctl32

Exports

Exports

Sections

.text Size: 14KB - Virtual size: 14KB

.data Size: 99KB - Virtual size: 419KB

.rsrc Size: 23KB - Virtual size: 22KB

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 14KB - Virtual size: 14KB

.data
Size: 99KB - Virtual size: 419KB

.rsrc
Size: 23KB - Virtual size: 22KB

.reloc
Size: 2KB - Virtual size: 1KB