36c0a5041ad0bdbc9f3033cb370de654_JaffaCakes118

General

Target

36c0a5041ad0bdbc9f3033cb370de654_JaffaCakes118
Size

326KB
MD5

36c0a5041ad0bdbc9f3033cb370de654
SHA1

98fb7f2ddb28f4e7e3e51394311b3cdf56e9e0fc
SHA256

e33a10ad087cbaf230fb07999ba6dce1482c9025e89f572fdf00c819be3ac9da
SHA512

c7c12e8e137f9c5cf8de9c763de77759feabbcd54716222ac88e664fa61f1e7b23e0aa5a3d5a47ddfee065bcbe5159d74716bf0a5b95441e32c5e8fdebd9e40e
SSDEEP

6144:sl5DMtfewvG7GwnwmARzvwct2FMEO6YR2cqsMfmgszg61SCRkQO+:4hff4wS2FM9q4gegiSCRkQ9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
36c0a5041ad0bdbc9f3033cb370de654_JaffaCakes118

Files

36c0a5041ad0bdbc9f3033cb370de654_JaffaCakes118
.exe windows:4 windows x86 arch:x86

081f434041b9786b9f242d741d028424

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

StgOpenPropStg
CoGetObject
OleSetMenuDescriptor
BindMoniker
PropVariantClear
OleRegGetMiscStatus
OleCreateDefaultHandler
OleNoteObjectVisible
CoFileTimeToDosDateTime
OleLoadFromStream
CoRegisterPSClsid
GetRunningObjectTable
IIDFromString
CoTaskMemAlloc

gdi32

CopyEnhMetaFileA
CreateCompatibleDC
AbortDoc
EnumObjects
CombineRgn
GetBrushOrgEx
GetBitmapDimensionEx
EqualRgn
CopyEnhMetaFileW
CreateDiscardableBitmap
CloseMetaFile

comctl32

ord6
CreateStatusWindowW
ord16
PropertySheetA
CreatePropertySheetPageW
ord8
ord3
ord14

shlwapi

StrStrA
StrRStrIW
StrRChrIW
StrCSpnW
StrChrIW
StrToIntA

kernel32

FreeEnvironmentStringsA
LocalHandle
HeapLock
GetProcAddress
GetModuleFileNameA
GetEnvironmentStrings
QueryPerformanceCounter
TlsGetValue
GetTickCount
TlsSetValue
VirtualAlloc
GetCommandLineA
GetModuleHandleA
GetStartupInfoA
MultiByteToWideChar
GetNumberFormatA
LeaveCriticalSection
VirtualAllocEx
LCMapStringA
IsBadWritePtr
HeapAlloc
EnterCriticalSection
SetLocaleInfoA
GetACP

msvcrt

__setusermatherr
_exit
_controlfp
_except_handler3
exit
_acmdln
__getmainargs
_initterm
_XcptFilter
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 313KB - Virtual size: 313KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 93KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

081f434041b9786b9f242d741d028424

Headers

File Characteristics

Imports

ole32

gdi32

comctl32

shlwapi

kernel32

msvcrt

Sections

.text Size: 10KB - Virtual size: 10KB

.rdata Size: 313KB - Virtual size: 313KB

.data Size: 512B - Virtual size: 93KB

.rsrc Size: 6KB - Virtual size: 6KB

.text
Size: 10KB - Virtual size: 10KB

.rdata
Size: 313KB - Virtual size: 313KB

.data
Size: 512B - Virtual size: 93KB

.rsrc
Size: 6KB - Virtual size: 6KB