faa4ace74dffe3fc0e2be6cee5013090_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

faa4ace74dffe3fc0e2be6cee5013090_JaffaCakes118
Size

391KB
MD5

faa4ace74dffe3fc0e2be6cee5013090
SHA1

245ff27a43addec666e4e212c9fadd523ee56ead
SHA256

2dbfd02a15887171a5d5bf5f32a9afceb9e8b50d9f6a51bf243a61a43b2d660c
SHA512

c3b81475c807649de35d55e66772d2c0daec15d365584a56e4a09aa9382df280d2ae8c492fcf72a752ae7fede8bec870e78497243b117c654a6b30ebe02c4ae1
SSDEEP

6144:fhXzmDBd2N0JtzYZ2fQwOIi+IVASt22i3A9g+Q6f:pjEtmqQcxIVAuOm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
faa4ace74dffe3fc0e2be6cee5013090_JaffaCakes118

Files

faa4ace74dffe3fc0e2be6cee5013090_JaffaCakes118
.exe windows:5 windows x86 arch:x86

7395a6e2ad00be1465dada96140214ff

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

LoadAcceleratorsA
LoadStringA
GetMessageA
TranslateMessage
DispatchMessageA
LoadIconA
LoadCursorA
RegisterClassExA
DrawTextA
EndPaint
PostQuitMessage
DefWindowProcA
PostMessageA
DestroyWindow
LoadBitmapA
SendMessageA
SetFocus
CreateWindowExA
BeginPaint
SetWindowTextA
LockWindowUpdate
SetDlgItemTextW
GetCursorPos
SetWindowLongA

kernel32

LCMapStringEx
HeapSize
GetStringTypeW
HeapReAlloc
RtlUnwind
LoadLibraryW
OutputDebugStringW
LoadLibraryExW
FlushFileBuffers
GetStartupInfoA
WriteFile
MapViewOfFile
CloseHandle
GetFileSize
CreateFileMappingA
CreateFileA
GetModuleHandleA
HeapFree
GetCurrentDirectoryA
HeapAlloc
Sleep
GetLastError
GetCommandLineW
GetSystemInfo
lstrlenA
GetProcessHeap
GetVersionExA
GetConsoleCP
GetConsoleMode
SetStdHandle
SetFilePointerEx
WriteConsoleW
IsDebuggerPresent
ExitProcess
GetCPInfo
GetOEMCP
GetCommandLineA
SetLastError
InterlockedIncrement
InterlockedDecrement
GetCurrentThreadId
EncodePointer
DecodePointer
CreateFileW
GetModuleHandleExW
GetProcAddress
MultiByteToWideChar
GetStdHandle
GetModuleFileNameW
GetFileType
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
InitOnceExecuteOnce
GetStartupInfoW
GetModuleFileNameA
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetTickCount64
GetEnvironmentStringsW
FreeEnvironmentStringsW
WideCharToMultiByte
UnhandledExceptionFilter
SetUnhandledExceptionFilter
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
GetCurrentProcess
TerminateProcess
GetModuleHandleW
IsProcessorFeaturePresent
EnterCriticalSection
LeaveCriticalSection
IsValidCodePage
GetACP

gdi32

CreateCompatibleBitmap
BitBlt
SelectObject
DeleteObject
DeleteDC
CreateCompatibleDC

shell32

CommandLineToArgvW

Sections

.text
Size: 169KB - Virtual size: 168KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 59KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

ndata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 153KB - Virtual size: 152KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7395a6e2ad00be1465dada96140214ff

Headers

DLL Characteristics

File Characteristics

Imports

user32

kernel32

gdi32

shell32

Sections

.text Size: 169KB - Virtual size: 168KB

.data Size: 59KB - Virtual size: 58KB

ndata Size: 9KB - Virtual size: 8KB

.rsrc Size: 153KB - Virtual size: 152KB

.text
Size: 169KB - Virtual size: 168KB

.data
Size: 59KB - Virtual size: 58KB

ndata
Size: 9KB - Virtual size: 8KB

.rsrc
Size: 153KB - Virtual size: 152KB