0da14f51ac295aba011d4b52f31bbe9b_JaffaCakes118

General

Target

0da14f51ac295aba011d4b52f31bbe9b_JaffaCakes118
Size

279KB
MD5

0da14f51ac295aba011d4b52f31bbe9b
SHA1

8bc68352b8bbf048c5ff95473915f11516aa0674
SHA256

02514998b3e566b2d6a2742357cc061b74764bd12acce0629e9001eee997cd54
SHA512

72a200ff583cb39e725ddcf93ad5fa2cdbc961be2a5c4708d659679de7cd059e83b6105a7477f7da5cf8dcfa5c40f764170fee282d6dcd87a3ddcad625e64453
SSDEEP

6144:RkYu1wICh2q7+nHKRNN/wCHSc+MS38hiUz:Rlu1wI62q7+HKRn/RVVhxz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0da14f51ac295aba011d4b52f31bbe9b_JaffaCakes118

Files

0da14f51ac295aba011d4b52f31bbe9b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c85a632f70fa4430ba401cd8876544a6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetThreadPriority
SetEvent
GetThreadTimes
GetConsoleCP
VirtualAlloc
IsDBCSLeadByte
CreateMutexA
CallNamedPipeA
GetOEMCP
GetLargestConsoleWindowSize
TlsGetValue
ReleaseMutex
TlsFree
GetExitCodeThread
AddAtomA
PulseEvent
GetThreadLocale
CompareStringA
GetDefaultCommConfigA
GetUserDefaultLangID

user32

GetWindowTextA
IsIconic
RegisterClassA
GetFocus
GetForegroundWindow
GetActiveWindow
ReleaseDC
GetClassInfoExA
GetWindow
CloseWindow
GetWindowTextLengthA
GetClassNameA
GetSystemMetrics
IsWindowVisible
ShowWindow
ValidateRect
InvalidateRect
ReleaseDC
GetDC

tapi32

MMCSetPhoneInfo
MMCSetServerConfig
MMCShutdown
MMCSetLineInfo
MMCInitialize

mlang

DllGetClassObject

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 880KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 40B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 92KB - Virtual size: 91KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c85a632f70fa4430ba401cd8876544a6

Headers

File Characteristics

Imports

kernel32

user32

tapi32

mlang

Sections

.text Size: 3KB - Virtual size: 3KB

.rdata Size: 1KB - Virtual size: 1KB

.data Size: 1024B - Virtual size: 880KB

.tls Size: 512B - Virtual size: 40B

.rsrc Size: 92KB - Virtual size: 91KB

.text
Size: 3KB - Virtual size: 3KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 1024B - Virtual size: 880KB

.tls
Size: 512B - Virtual size: 40B

.rsrc
Size: 92KB - Virtual size: 91KB