423153ab4c651bfe2e98bc12593be605_JaffaCakes118

General

Target

423153ab4c651bfe2e98bc12593be605_JaffaCakes118
Size

52KB
MD5

423153ab4c651bfe2e98bc12593be605
SHA1

6503e3326a5e8383c3cd72f43ae7466046f2e015
SHA256

3f4415038c2d765179648a4c46112c5f04b6a8b120f4d97cd4c2fe15d003ed9c
SHA512

381da03cbca9d601101147fef2d7e2845d90e59ff0d51e7687bc9512d928688ab791c38632e7ad37dbc4f38b411e494f3744370f33bac56df43021a7bda705e7
SSDEEP

768:9bI3tYJH/4yNz5af5bV+tLfgLpu2YFKZ7AIF0GpqclE0eDw/B5JxfEOcQE73zuQC:vt85bV+lfgLs2qwwdwJLNEO+rzuoE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
423153ab4c651bfe2e98bc12593be605_JaffaCakes118

Files

423153ab4c651bfe2e98bc12593be605_JaffaCakes118
.dll windows:4 windows x86 arch:x86

7ac417c0b09dd0a22f58e7a87abe692d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetConsoleCommandHistoryLengthA
SetFileApisToANSI
CreateNamedPipeA
WaitNamedPipeA
MoveFileA
EraseTape
SetThreadLocale
lstrcpyW
GetLastError
GetNumberFormatA
GetCommandLineW
EnumResourceLanguagesW
CallNamedPipeA
Module32NextW
VerLanguageNameW

msvcrt

vfwprintf
__lc_handle
exp
_wcsnicoll
_unloaddll
wctomb
__p__amblksiz
_memicmp
ungetc
putwchar
_local_unwind2
_access

shell32

ShellExec_RunDLL
SHFileOperation
ExtractAssociatedIconW
SHGetFileInfoA
StrNCmpW
StrNCmpIA
SHGetPathFromIDListA
ShellExec_RunDLLW
DuplicateIcon
InternalExtractIconListW
PrintersGetCommand_RunDLLW

shlwapi

PathSearchAndQualifyA
SHRegSetUSValueA
PathGetCharTypeA
StrStrW
PathRemoveExtensionW
SHRegGetUSValueW
PathBuildRootW
UrlHashW
PathQuoteSpacesA
PathFindSuffixArrayA
PathRemoveArgsW
UrlIsA
SHRegSetPathW
PathIsUNCServerW
PathFindExtensionW
StrStrA
PathAppendW
ChrCmpIW

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 43KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 736B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7ac417c0b09dd0a22f58e7a87abe692d

Headers

File Characteristics

Imports

kernel32

msvcrt

shell32

shlwapi

Sections

.text Size: 5KB - Virtual size: 4KB

.rdata Size: 1KB - Virtual size: 1KB

.data Size: 43KB - Virtual size: 43KB

.rsrc Size: 1024B - Virtual size: 736B

.reloc Size: 512B - Virtual size: 16B

.text
Size: 5KB - Virtual size: 4KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 43KB - Virtual size: 43KB

.rsrc
Size: 1024B - Virtual size: 736B

.reloc
Size: 512B - Virtual size: 16B