3696bc14508dff17bd58524146f1d1b7_JaffaCakes118

General

Target

3696bc14508dff17bd58524146f1d1b7_JaffaCakes118
Size

191KB
MD5

3696bc14508dff17bd58524146f1d1b7
SHA1

0b5540aa758bcefeb906e2ba33292b5b86e597f8
SHA256

b8436540c776ae11c3d7c314f768e2928290b0acd537c2434d4193afbed3f014
SHA512

f8b6dacce004d43953ebc7fa3427bb040ab8e1e022b3db05d8c0f1d1b3812b8d0a9c6ece94b9a079bffafc840498ddd9689c5dcf9958225be0d300f45c8d9077
SSDEEP

3072:0HfHNYCG6APV716vVqV/Pz3A+hZyE56ilAWuJ8qK4T+meDndA26DYeADySHd7F7n:0HVtG6APVyV8PzV36V16Hn6kp2SHdJY6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3696bc14508dff17bd58524146f1d1b7_JaffaCakes118

Files

3696bc14508dff17bd58524146f1d1b7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1e2c98a756d1fc813ca72335defcdc03

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetExitCodeThread
SetEvent
TlsFree
EnumCalendarInfoA
GetConsoleInputWaitHandle
GetNumberOfConsoleMouseButtons
GetOEMCP
GetModuleHandleA
TlsGetValue
IsDBCSLeadByte
GetUserDefaultLangID
GetConsoleCP
ReleaseMutex
lstrcatA
OutputDebugStringA
VirtualAlloc
lstrcpyA
GetThreadPriority
GetThreadLocale
PulseEvent
GetThreadTimes

user32

ReleaseDC
GetClassInfoExA
InvalidateRect
GetDC
RegisterClassA
GetWindow
ReleaseDC
ShowWindow
GetForegroundWindow
GetWindowTextLengthA
CloseWindow
GetFocus
GetWindowTextA
ValidateRect
GetActiveWindow
IsIconic
GetSystemMetrics
IsWindowVisible
GetClassNameA

tapi32

MMCShutdown
MMCSetLineInfo
MMCSetPhoneInfo
MMCInitialize
MMCSetServerConfig

mlang

DllGetClassObject

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Tls
Size: 512B - Virtual size: 40B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1e2c98a756d1fc813ca72335defcdc03

Headers

File Characteristics

Imports

kernel32

user32

tapi32

mlang

Sections

.text Size: 3KB - Virtual size: 3KB

.rdata Size: 1KB - Virtual size: 1KB

.data Size: 1024B - Virtual size: 522B

.Tls Size: 512B - Virtual size: 40B

.rsrc Size: 4KB - Virtual size: 3KB

.text
Size: 3KB - Virtual size: 3KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 1024B - Virtual size: 522B

.Tls
Size: 512B - Virtual size: 40B

.rsrc
Size: 4KB - Virtual size: 3KB