18706f588893bdce351b0c7823bef18f_JaffaCakes118

General

Target

18706f588893bdce351b0c7823bef18f_JaffaCakes118
Size

207KB
MD5

18706f588893bdce351b0c7823bef18f
SHA1

24d495c7cf5baf1d775704d924ac9a794a9e47fb
SHA256

ace5540cd59a8247ce83ebb613a7ac3ecd2a48882df931b55dad4e70aab06d6f
SHA512

211ddae82ae9c439cbeaf7e191342cce902d69414b0aac4404ffea9753a76abd2a257ae16580e78de69477dce7f72e63b870d463438cf41ced23b1be166a3049
SSDEEP

6144:RyjExotRmmpRUylhdBEIZxAvX5ALtluGtC:Ryj9t0g2ylHZOxalQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
18706f588893bdce351b0c7823bef18f_JaffaCakes118

Files

18706f588893bdce351b0c7823bef18f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

fad091c1de598430839e8549c5a06002

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

rpcrt4

RpcBindingSetAuthInfoA
RpcStringBindingComposeA
NdrClientCall
RpcBindingFromStringBindingA
RpcStringFreeA

user32

SetScrollRange
EmptyClipboard
CallNextHookEx
ToAscii
UnhookWindowsHookEx
RealGetWindowClass
GetSysColorBrush
SetWindowPos
RegisterClassW
ChildWindowFromPoint
SetClipboardData
IsClipboardFormatAvailable
SetWindowsHookExW
ClipCursor
DefWindowProcW
WinHelpW
DestroyCursor
DestroyIcon
DrawEdge
GetSysColor

comctl32

ImageList_Add
ImageList_Create
ImageList_GetIconSize
ImageList_DrawEx
ImageList_Destroy

kernel32

CreateFiber
GetFileAttributesA
SearchPathW
FindResourceExA
FlushFileBuffers
LockFile
TerminateProcess
GetVolumeInformationW
GetFileTime
CompareStringW
IsDBCSLeadByte
FileTimeToLocalFileTime
UnlockFile
EnumResourceNamesA
FileTimeToSystemTime
GetVersionExW
FlushFileBuffers
GetUserDefaultLangID
LocalAlloc
GetFileType
GetSystemTime
VerLanguageNameW
GetProfileStringW
SetEndOfFile
GetSystemDirectoryW

comdlg32

GetFileTitleA

Sections

.text
Size: 187KB - Virtual size: 187KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fad091c1de598430839e8549c5a06002

Headers

File Characteristics

Imports

rpcrt4

user32

comctl32

kernel32

comdlg32

Sections

.text Size: 187KB - Virtual size: 187KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 16KB - Virtual size: 16KB

.tls Size: 512B - Virtual size: 92KB

.text
Size: 187KB - Virtual size: 187KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 16KB - Virtual size: 16KB

.tls
Size: 512B - Virtual size: 92KB