262efd4fb196da2c9679675e63e39049_JaffaCakes118

General

Target

262efd4fb196da2c9679675e63e39049_JaffaCakes118
Size

232KB
MD5

262efd4fb196da2c9679675e63e39049
SHA1

23031c2bc7a52256c5861b1767d607d810efb174
SHA256

ebbd0f83b154e3c9228ba2f2e4dae63ec3b74269a3cb1e8d04b8c3498dc2d9b8
SHA512

3b32f15aa2283af2656c639f34948117bdd2be00eee5db3ef3f75d84d85e67fdeac1af1e4892429365836a4ffddea0585bf67fc6ceea16607be7ad1ff3b1e08e
SSDEEP

3072:FonyEOEDCU8sLbHwhVB81SlX9aFlCi2EEgyjf88D9BCZWbEh05t:Fo5OVfsLc1l4FSEEFf88RAcm03

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
262efd4fb196da2c9679675e63e39049_JaffaCakes118

Files

262efd4fb196da2c9679675e63e39049_JaffaCakes118
.dll windows:4 windows x86 arch:x86

fd4c4e4f593c8a6fa7016b239b9fd4c5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

advapi32

RegOpenKeyExA
RegCloseKey

kernel32

CloseHandle
CreateFileA
ExitProcess
FlushFileBuffers
FreeEnvironmentStringsA
GetCommandLineA
GetEnvironmentStringsA
GetFileSize
GetFileType
GetLastError
GetModuleHandleA
GetStartupInfoA
GetSystemInfo
GetVersionExA
GlobalAlloc
GlobalFree
GlobalReAlloc
MultiByteToWideChar
OutputDebugStringA
ReadFile
SetEndOfFile
SetErrorMode
SetFilePointer
SetLastError
Sleep
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
WideCharToMultiByte
WriteFile

ole32

CoInitialize
CoUninitialize

oleaut32

SafeArrayCreate
SysAllocStringByteLen
SysFreeString
SysStringByteLen
VariantClear
VariantCopy

\drake04\ft\fileio

SETSTATEREFERENCE

\drake04\ft\daycount

JULIANDATE

\drake04\ft\layout

LAYOUT
OVERRIDESTR
OVERRIDE

Exports

Exports

ARI1

Sections

.text
Size: 216KB - Virtual size: 215KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.link
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fd4c4e4f593c8a6fa7016b239b9fd4c5

Headers

File Characteristics

Imports

advapi32

kernel32

ole32

oleaut32

\drake04\ft\fileio

\drake04\ft\daycount

\drake04\ft\layout

Exports

Exports

Sections

.text Size: 216KB - Virtual size: 215KB

.data Size: 6KB - Virtual size: 10KB

.link Size: 1KB - Virtual size: 1KB

.rloc Size: 8KB - Virtual size: 7KB

.text
Size: 216KB - Virtual size: 215KB

.data
Size: 6KB - Virtual size: 10KB

.link
Size: 1KB - Virtual size: 1KB

.rloc
Size: 8KB - Virtual size: 7KB