02f5dcab39ae91cc70505db8d8fcb07b_JaffaCakes118

General

Target

02f5dcab39ae91cc70505db8d8fcb07b_JaffaCakes118
Size

23KB
MD5

02f5dcab39ae91cc70505db8d8fcb07b
SHA1

30525579cc23ab69f7365d04188e6d59a0e6c48f
SHA256

06a8152cb75e94edcb81b448b486246b8449afecdeb800014afdfd0718b3d249
SHA512

c5e71e1c03b82a918c153e274222e3b7b1213c54619f1de47d44eda7dd4d2570ead5c57ea2b5a725e0af91b97500bdf87ef14dfa0fcacf934b52e34aa2227275
SSDEEP

384:BqiuKBnZNnXWFisXrTL2Ru+akmpHXhbfRM8MCJCXmrfffMhhhhhthhhhhthhhhhc:0iuKBXnXW0+PKNFmpHxm/CJCWrfffAhQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
02f5dcab39ae91cc70505db8d8fcb07b_JaffaCakes118

Files

02f5dcab39ae91cc70505db8d8fcb07b_JaffaCakes118
.exe windows:5 windows x86 arch:x86

3cb3ec82dcf3013613b07f187af78ba5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

TileChildWindows
RegisterWindowMessageW
keybd_event
OpenInputDesktop
SendMessageCallbackW
DlgDirSelectComboBoxExW
GetListBoxInfo
GetNextDlgGroupItem

gdi32

CreateDCW
FillPath
GetCharacterPlacementA
EngDeletePalette
GetCurrentObject
GetCharWidth32A

msvcrt

_wgetenv
_Getmonths
_wcsrev
__p___mb_cur_max
_wfindnext64
_mbsnbcoll
_mbctohira
_CIsinh
__initenv
_wexeclpe

kernel32

SetComputerNameA
SetFileTime
GetPrivateProfileSectionNamesA
TlsAlloc
WaitForMultipleObjects
IsDBCSLeadByte
GetDateFormatA
EnterCriticalSection
CmdBatNotification
BeginUpdateResourceW
GlobalReAlloc
GlobalUnlock
GetConsoleMode
TermsrvAppInstallMode
FreeUserPhysicalPages

ole32

CoUninitialize
HACCEL_UserSize
CoGetCurrentProcess
CLSIDFromOle1Class
OleCreateFromFileEx
CoReleaseServerProcess
CoWaitForMultipleHandles

advapi32

LookupPrivilegeDisplayNameW
I_ScIsSecurityProcess
GetTraceEnableLevel
ElfOpenBackupEventLogA
NotifyChangeEventLog
SystemFunction001
RegisterServiceCtrlHandlerExA
SystemFunction009
SystemFunction007

Sections

.text
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3cb3ec82dcf3013613b07f187af78ba5

Headers

DLL Characteristics

File Characteristics

Imports

user32

gdi32

msvcrt

kernel32

ole32

advapi32

Sections

.text Size: 19KB - Virtual size: 19KB

.data Size: 2KB - Virtual size: 2KB

.rsrc Size: 1024B - Virtual size: 4KB

.text
Size: 19KB - Virtual size: 19KB

.data
Size: 2KB - Virtual size: 2KB

.rsrc
Size: 1024B - Virtual size: 4KB