1bb1077fa13a26c5570bdad991bfd447_JaffaCakes118

General

Target

1bb1077fa13a26c5570bdad991bfd447_JaffaCakes118
Size

384KB
MD5

1bb1077fa13a26c5570bdad991bfd447
SHA1

ffb9a187c59f80946dd199fda70b7ca1d93bc634
SHA256

284a109e8ba4338c1784d84427d92d0b8f86a493c69a9e7fd02aab80a1d04892
SHA512

bd8856b793eb1fc6d1eeccfd0c598bea4b38de1a5f78a98c752d37176cbd22afe5233178ef8f89a22ff539c313b030ae0682112e50f250c7f2b6c887877430f7
SSDEEP

6144:iiDp72RiDYqqcwfmE7lAmG1BkL0LENfNsAz+HIXMGunX6CsQ+HMbTfEn51:iw7tqrmE5AmAkYQNDyHaMGunzsQ1bT8n

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1bb1077fa13a26c5570bdad991bfd447_JaffaCakes118

Files

1bb1077fa13a26c5570bdad991bfd447_JaffaCakes118
.exe windows:5 windows x86 arch:x86

39081f25e2f400712e76185d98ae85cb

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegRestoreKeyW
ControlTraceA
OpenSCManagerA
CryptVerifySignatureA
SystemFunction024
GetFileSecurityA
RegConnectRegistryW
GetExplicitEntriesFromAclW
GetMultipleTrusteeW

gdi32

GdiPlayScript
SetAbortProc
GdiConvertFont
FONTOBJ_pfdg
PlayEnhMetaFile
EngBitBlt

kernel32

GetLocaleInfoA
OpenWaitableTimerA
GetTapePosition
ConvertDefaultLocale
BuildCommDCBA
EscapeCommFunction
GetTempFileNameA
SetHandleInformation
HeapSummary
GetSystemWindowsDirectoryW
EnumDateFormatsExA
GetFullPathNameA
GetProfileStringA
GetModuleFileNameA
lstrcmp

msvcrt

pow
__p__tzname
fgets
sin
_HUGE
_osplatform
_getws
_assert
_wctime64
_mbstok

ole32

HICON_UserFree
HDC_UserMarshal
WriteFmtUserTypeStg
PropVariantCopy
CoGetClassVersion
SNB_UserFree
CoGetStdMarshalEx

user32

AlignRects
GetCursorInfo
DeleteMenu
TileWindows
MenuWindowProcW
DdeFreeDataHandle
PrivateExtractIconsW
HideCaret

Sections

.text
Size: 380KB - Virtual size: 380KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 541KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

39081f25e2f400712e76185d98ae85cb

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

gdi32

kernel32

msvcrt

ole32

user32

Sections

.text Size: 380KB - Virtual size: 380KB

.data Size: 2KB - Virtual size: 3KB

.rsrc Size: 1024B - Virtual size: 541KB

.text
Size: 380KB - Virtual size: 380KB

.data
Size: 2KB - Virtual size: 3KB

.rsrc
Size: 1024B - Virtual size: 541KB