918101514ec071cddd5dd5f72a5de02c_JaffaCakes118

General

Target

918101514ec071cddd5dd5f72a5de02c_JaffaCakes118
Size

11KB
MD5

918101514ec071cddd5dd5f72a5de02c
SHA1

98e0fa22e07932b65a41b3e355de85dd886fda76
SHA256

1ec82c34a4e2aaa7d98b619cccbfb7f5479129a44b0694617fac0fbde6c929e6
SHA512

21a1bb287593719ebf2fbeaa18d3095e18a1a3332f06e860a1b636eb3afa2cfb57d95add4f2f49753537f70fb6a24b595de5e5e3f5c8edca91cbbeedf4d145bd
SSDEEP

192:LsexxfXLIs/dFxDZ/H5ijnNC4kDiK/gEf6TMKbNag9WysYW7J:LbLI6Ff/cBLhK/gEf61bNag9WysYW7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
918101514ec071cddd5dd5f72a5de02c_JaffaCakes118

Files

918101514ec071cddd5dd5f72a5de02c_JaffaCakes118
.dll windows:4 windows x86 arch:x86

2f59e1683122d552fb088d56beaa74ce

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ExitThread
FileTimeToSystemTime
GetComputerNameA
GetCurrentProcess
GetCurrentProcessId
GetDriveTypeA
GetFileAttributesA
GetFileTime
GetModuleFileNameA
GetModuleHandleA
EnumResourceTypesA
GetVolumeInformationA
GetWindowsDirectoryA
LoadLibraryA
Sleep
SystemTimeToTzSpecificLocalTime
Thread32First
Thread32Next
VirtualAlloc
VirtualProtect
DeviceIoControl
DisableThreadLibraryCalls
DeleteFileA
CreateToolhelp32Snapshot
CreateThread
CreateFileA
GetProcAddress
CloseHandle

user32

SendDlgItemMessageA
MessageBoxA
GetWindowTextA
GetDlgItem
GetDC
GetClassNameA
EnumThreadWindows
GetDlgItemTextA
SendMessageA

advapi32

GetCurrentHwProfileA
RegCloseKey
RegOpenKeyExA
RegQueryValueExA
GetUserNameA

gdi32

GetPixel

shell32

SHGetSpecialFolderPathA

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1016B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 800B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2f59e1683122d552fb088d56beaa74ce

Headers

File Characteristics

Imports

kernel32

user32

advapi32

gdi32

shell32

Sections

.text Size: 7KB - Virtual size: 6KB

.rdata Size: 1KB - Virtual size: 1KB

.data Size: - Virtual size: 16KB

.rsrc Size: 1024B - Virtual size: 1016B

.reloc Size: 1024B - Virtual size: 800B

.text
Size: 7KB - Virtual size: 6KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: - Virtual size: 16KB

.rsrc
Size: 1024B - Virtual size: 1016B

.reloc
Size: 1024B - Virtual size: 800B