9f05e85994fb10053e78b1e7ac522e99_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

9f05e85994fb10053e78b1e7ac522e99_JaffaCakes118
Size

88KB
MD5

9f05e85994fb10053e78b1e7ac522e99
SHA1

acb3b6f737bf79308bb791d044116e3804539f0f
SHA256

ccb6b5d240349db832910326c06e5199a093853222f2419275fc2368cee6bde7
SHA512

2e6df67c33fcd9976861b981b708d7c42d56eb9e2566efe41b5066a4f17cab0efd4dee8c4785ac5b354707130f130977dd8a1ae8c2fd2533195cfe64b5340f1b
SSDEEP

1536:nw3YT90CV/DmUU8gUrnAmMTYf3KpUoP+9aXX7A2IYzUGMD+pRR5GgEARUxq:bT9LpmSrokf3W7AdYzbMIHRQq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
9f05e85994fb10053e78b1e7ac522e99_JaffaCakes118

Files

9f05e85994fb10053e78b1e7ac522e99_JaffaCakes118
.exe windows:5 windows x86 arch:x86

780875bb941a0bdd73c2b73a0f683096

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetSysColorBrush
OffsetRect
SetMessageExtraInfo
GetIconInfo
CopyIcon
ReplyMessage
ChildWindowFromPoint
FreeDDElParam
TranslateMessage
IntersectRect
VkKeyScanW
GetWindowRgn

ole32

CoGetMalloc
CreateItemMoniker
CoGetMarshalSizeMax
IIDFromString
CoBuildVersion
CoGetCallContext
OleCreateFromFile

wininet

HttpSendRequestA
GopherGetAttributeW
InternetUnlockRequestFile
FindFirstUrlCacheEntryExA
UnlockUrlCacheEntryFile
InternetOpenUrlA

gdi32

CreateBitmapIndirect
CreateColorSpaceW
CreateDCW
AngleArc
AddFontResourceExW

opengl32

glReadPixels
glRasterPos4f
glNormal3iv
glTexCoord3dv
glEvalPoint1
glNormal3s
glVertex3iv

kernel32

CloseHandle
ReadFile
WriteConsoleW
SetStdHandle
GetStringTypeW
LCMapStringW
FlushFileBuffers
HeapSize
MultiByteToWideChar
GetConsoleMode
CreateFileW
SetFilePointer
RtlUnwind
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
Sleep
LoadLibraryW
GetConsoleCP
ExitProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
InterlockedDecrement
SetComputerNameExW
GetEnvironmentStrings
SetFilePointerEx
WriteFileEx
OpenMutexA
GetLastError
HeapFree
HeapReAlloc
HeapAlloc
GetCommandLineA
HeapSetInformation
GetStartupInfoW
IsProcessorFeaturePresent
HeapCreate
EncodePointer
DecodePointer
GetProcAddress
GetModuleHandleW
WriteFile
GetStdHandle
GetModuleFileNameW
EnterCriticalSection
LeaveCriticalSection
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId

Sections

.text
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

780875bb941a0bdd73c2b73a0f683096

Headers

DLL Characteristics

File Characteristics

Imports

user32

ole32

wininet

gdi32

opengl32

kernel32

Sections

.text Size: 37KB - Virtual size: 37KB

.rdata Size: 14KB - Virtual size: 14KB

.data Size: 4KB - Virtual size: 11KB

.rsrc Size: 31KB - Virtual size: 31KB

.text
Size: 37KB - Virtual size: 37KB

.rdata
Size: 14KB - Virtual size: 14KB

.data
Size: 4KB - Virtual size: 11KB

.rsrc
Size: 31KB - Virtual size: 31KB