0a71036c9be0e2039e1ea7446ce1007c_JaffaCakes118

General

Target

0a71036c9be0e2039e1ea7446ce1007c_JaffaCakes118
Size

57KB
MD5

0a71036c9be0e2039e1ea7446ce1007c
SHA1

4b3ce166abd3c745ccd0bb803f7a45306aae1919
SHA256

456ad2ac705bf3fa8a8b18743d3740000cac0785cbdea7572f0dc65c2ad408a3
SHA512

5bc44c16dc302422165eda73943069851315ac20e3793b1231a2c7895e228a02b9b1e9234f41d59d47790a690ca97cabcd7e756c901e4e44c9f6cf9d5decb26d
SSDEEP

1536:HLpLLnu8UKK+JrsuyDTICTbqlo3Ns4d+gov04DZ:HLpnu8UF+JWfjT9ds4wgov04DZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0a71036c9be0e2039e1ea7446ce1007c_JaffaCakes118

Files

0a71036c9be0e2039e1ea7446ce1007c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

75d7e8d8fa81f39b40162cd1fdd969f0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

RegisterClassA
SetFocus
SetUserObjectSecurity
SystemParametersInfoA
PeekMessageA
MessageBoxA
LoadIconA
DispatchMessageA

kernel32

SetErrorMode
lstrcmpiA
WaitForSingleObject
UnmapViewOfFile
SetLastError
SetEnvironmentVariableA
SetEndOfFile
RtlUnwind
ResetEvent
CloseHandle
CreateEventA
ExitProcess
GetCommandLineA
GetCurrentThreadId
GetModuleFileNameA
GetModuleHandleA
GetModuleHandleW
GetPriorityClass
GetStartupInfoA
GetSystemTimeAsFileTime
GetVersionExA
HeapAlloc
HeapCreate
HeapReAlloc
IsValidCodePage
MultiByteToWideChar

setupapi

SetupDiGetClassDevPropertySheetsW
SetupInitDefaultQueueCallback
SetupDiGetHwProfileList
SetupInstallFilesFromInfSectionW

olepro32

OleCreatePictureIndirect

advapi32

GetAccessPermissionsForObjectW
ImpersonateNamedPipeClient
RegEnumKeyExA
CloseTrace

security

MakeSignature
QuerySecurityPackageInfoA
DeleteSecurityPackageA
DeleteSecurityPackageW
CompleteAuthToken
VerifySignature
SealMessage
InitializeSecurityContextA

oleacc

LresultFromObject
ObjectFromLresult
CreateStdAccessibleObject

Sections

.text
Size: 44KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

75d7e8d8fa81f39b40162cd1fdd969f0

Headers

File Characteristics

Imports

user32

kernel32

setupapi

olepro32

advapi32

security

oleacc

Sections

.text Size: 44KB - Virtual size: 48KB

.data Size: 9KB - Virtual size: 12KB

.rsrc Size: 1KB - Virtual size: 4KB

.reloc Size: 1024B - Virtual size: 4KB

.text
Size: 44KB - Virtual size: 48KB

.data
Size: 9KB - Virtual size: 12KB

.rsrc
Size: 1KB - Virtual size: 4KB

.reloc
Size: 1024B - Virtual size: 4KB