3da595f9fe79b3215068f283316f3381_JaffaCakes118

General

Target

3da595f9fe79b3215068f283316f3381_JaffaCakes118
Size

54KB
MD5

3da595f9fe79b3215068f283316f3381
SHA1

0e9ad39530b68569c65e8ae40261892f3379ba13
SHA256

c6a172321846eef99245cb9ad19935c2c17e604b578b5d6dcbce9b374270051a
SHA512

c10d5bbdf71781650e161145231f685331dfa158bd02fc3385527e7a7d0d13aa99ea9ffb33903f6f67b4969be837f16065ef339e3633edcf7b13ce36c43ec1e5
SSDEEP

768:BBP862sr/+uPuMwed5pGiFuY2CTjuKx5lb4yXI6fcrWkLdyhzFZZqBGu2gA:D8Q+uRdPYCWkHb/I6VkxmeGtgA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3da595f9fe79b3215068f283316f3381_JaffaCakes118

Files

3da595f9fe79b3215068f283316f3381_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2b7af642cedff7d0f59f81778b07baf9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetWindowPlacement
SetClipboardData
SetClassLongA
RegisterClassExA
LoadIconA
LoadCursorA
GetFocus
GetDlgItem
BeginDeferWindowPos

kernel32

lstrcpynA
lstrcmpiA
SizeofResource
SetLastError
RtlUnwind
MultiByteToWideChar
HeapReAlloc
HeapDestroy
HeapCreate
CloseHandle
ExitProcess
GetCommandLineA
GetConsoleOutputCP
GetCurrentProcessId
GetModuleHandleA
GetStartupInfoA
GetVersionExA
GlobalLock
HeapAlloc

setupapi

SetupScanFileQueueA
SetupDiSetDeviceInstallParamsA
SetupDiGetClassImageListExA
SetupCreateDiskSpaceListA

olepro32

OleIconToCursor
OleTranslateColor

oleacc

GetOleaccVersionInfo
AccessibleObjectFromPoint
AccessibleObjectFromEvent
CreateStdAccessibleProxyW
GetRoleTextW
GetRoleTextA

advapi32

ElfNumberOfRecords
LsaGetRemoteUserName
QueryServiceConfig2W
RemoveTraceCallback
SetPrivateObjectSecurityEx
CryptDecrypt

security

InitSecurityInterfaceA
ExportSecurityContext
AddSecurityPackageA

Sections

.text
Size: 41KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2b7af642cedff7d0f59f81778b07baf9

Headers

File Characteristics

Imports

user32

kernel32

setupapi

olepro32

oleacc

advapi32

security

Sections

.text Size: 41KB - Virtual size: 44KB

.data Size: 9KB - Virtual size: 12KB

.rsrc Size: 1KB - Virtual size: 4KB

.reloc Size: 1024B - Virtual size: 4KB

.text
Size: 41KB - Virtual size: 44KB

.data
Size: 9KB - Virtual size: 12KB

.rsrc
Size: 1KB - Virtual size: 4KB

.reloc
Size: 1024B - Virtual size: 4KB