453e04ebb80270eaf545fc7a8a272e9b_JaffaCakes118

General

Target

453e04ebb80270eaf545fc7a8a272e9b_JaffaCakes118
Size

24KB
MD5

453e04ebb80270eaf545fc7a8a272e9b
SHA1

bc255e9d7fde7f6c35b5259699d0beddd52a2c54
SHA256

16e1ea7945da1b788a659ce65b383fcf3209113d4e61b9c2817d4fcbd5da9033
SHA512

1fb390381de9cd9766f4c21bf68d100da67e9d0ae27a8e6bbc43bd05721edbcc5b3e56395ada6e8bd615b50dd11e14755435878ccc337177cb0db6eb504982f2
SSDEEP

384:YM3yS0LEBtAWzq0mmINz4lG3DJswC7Sa7HvjyzbHH5yk+I6MDTv:NiABCWcNklG3Pd2HLyHHN3ZP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
453e04ebb80270eaf545fc7a8a272e9b_JaffaCakes118

Files

453e04ebb80270eaf545fc7a8a272e9b_JaffaCakes118
.exe windows:5 windows x86 arch:x86

1e0be38fd1910f4f27072e21c3fd632d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

PatBlt
DrawEscape
SetPixelV
StartDocW
GdiConvertMetaFilePict

advapi32

GetLengthSid
ElfDeregisterEventSource
RegRestoreKeyW
CryptEncrypt
RegOpenKeyW
RegCreateKeyExW
CryptSetProviderA
BuildSecurityDescriptorW
ObjectDeleteAuditAlarmA

kernel32

GetCurrentConsoleFont
GetCommandLineA
GetModuleHandleA
VerifyVersionInfoA
DeviceIoControl
GetNamedPipeHandleStateW
CreateDirectoryExA
GetProcAddress
LocalShrink
VirtualLock
GetNumberFormatA
GetCPInfoExW
GetStartupInfoA
GetLongPathNameW
EnumSystemLanguageGroupsW

msvcrt

_strnicmp
fmod
_ismbckata
_endthread
_mbsnbicmp
_sys_nerr
scanf
_utime64
_wcsupr
_wfindnexti64

user32

GetCaretBlinkTime
MsgWaitForMultipleObjects
LoadCursorFromFileW
EnumDisplaySettingsExA
GetSystemMetrics
GetMenuDefaultItem
CreateDialogIndirectParamAorW
CreateCaret

ole32

DllDebugObjectRPCHook
ReadClassStg
CoDosDateTimeToFileTime
DoDragDrop
HBRUSH_UserUnmarshal
CoGetPSClsid

Sections

.text
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 792B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1e0be38fd1910f4f27072e21c3fd632d

Headers

DLL Characteristics

File Characteristics

Imports

gdi32

advapi32

kernel32

msvcrt

user32

ole32

Sections

.text Size: 20KB - Virtual size: 20KB

.data Size: 2KB - Virtual size: 2KB

.rsrc Size: 1024B - Virtual size: 792B

.text
Size: 20KB - Virtual size: 20KB

.data
Size: 2KB - Virtual size: 2KB

.rsrc
Size: 1024B - Virtual size: 792B