1a9156be5407220c23102d615bb08c9b_JaffaCakes118

General

Target

1a9156be5407220c23102d615bb08c9b_JaffaCakes118
Size

42KB
MD5

1a9156be5407220c23102d615bb08c9b
SHA1

5f287a1f9e081ac70b74c629c15380b52996b514
SHA256

214f72fdf3e8779ef50421ab1ee925eed9d4de88e517e9087a506a9dcd691395
SHA512

4797ac3473e0f17735ab1ceaa560717aa8f965677249c0e494f4df608396521f3b8e6c7eaec8b8b42ccb2c3cfd13308e194196ac65a5f7d54a31ef57f50be080
SSDEEP

768:MZEAnpspbLrklxAuDS2FvpDncRtzJCWGY4k5MyXWCNSMeT:M6nH81Dfbc7zJVGPk59VNSv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1a9156be5407220c23102d615bb08c9b_JaffaCakes118

Files

1a9156be5407220c23102d615bb08c9b_JaffaCakes118
.exe windows:5 windows x86 arch:x86

12b32bca7aaa7f4a6d0cfe0e1ccdd297

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadResource
GetStartupInfoA
GetFileAttributesExW
GetCommandLineA
SetConsoleOS2OemFormat
GetConsoleCursorMode
GlobalMemoryStatus
OpenFileMappingW
GetModuleFileNameW
FreeLibrary
GetModuleHandleA
GetTapePosition
WriteConsoleOutputW
WriteConsoleA
GetLogicalDriveStringsA

advapi32

LsaQueryTrustedDomainInfo
WmiSetSingleInstanceA
CryptSetProviderA
LsaRetrievePrivateData
WmiQueryAllDataA
DeregisterEventSource
ElfDeregisterEventSource
BackupEventLogW
GetSecurityDescriptorControl

ole32

HPALETTE_UserSize
CreateDataCache
STGMEDIUM_UserMarshal
ReadStringStream
UpdateDCOMSettings
PropVariantCopy

gdi32

EngDeleteSemaphore
ColorMatchToTarget
GdiAddGlsRecord
LineTo
GdiGradientFill

msvcrt

__p__mbcasemap
_ultow
fseek
_getw
_winminor
_Strftime
_dup
_ismbchira
_commode
_mbscoll

user32

InSendMessage
GetKeyState
CallNextHookEx
SetWindowsHookExA
SetClassLongW
EnumDisplaySettingsExA
BringWindowToTop
CountClipboardFormats

Sections

.text
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 892B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

12b32bca7aaa7f4a6d0cfe0e1ccdd297

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

advapi32

ole32

gdi32

msvcrt

user32

Sections

.text Size: 36KB - Virtual size: 36KB

.data Size: 4KB - Virtual size: 3KB

.rsrc Size: 1024B - Virtual size: 892B

.text
Size: 36KB - Virtual size: 36KB

.data
Size: 4KB - Virtual size: 3KB

.rsrc
Size: 1024B - Virtual size: 892B