4d61db1904c2438a9218eb5b74db40ef_JaffaCakes118

General

Target

4d61db1904c2438a9218eb5b74db40ef_JaffaCakes118
Size

2.0MB
MD5

4d61db1904c2438a9218eb5b74db40ef
SHA1

24bd9b96a0144a131ab7143e10f127ec294d144d
SHA256

7dfc7acdddabca9c6429df2116bbbfbba3c17b48fa7695e3635784c1cb6415d9
SHA512

65b3b175da50ea839cce251ef2f054440e2de55be9b3e03ca2048ff2df3b4d8e49108365bac3bad56e0282239fd7ec613263fc75624255106dfdc31af3a3dd30
SSDEEP

49152:XoonDKQlFtiDE7dcX+vAW+OhAEMxgQKYvhu+mkXbXwH:bDKQ3tL7iX+I/OeBrKCgQXcH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4d61db1904c2438a9218eb5b74db40ef_JaffaCakes118

Files

4d61db1904c2438a9218eb5b74db40ef_JaffaCakes118
.exe windows:4 windows x86 arch:x86

396a8682f7b7b92e1cacb2f2d296caca

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comdlg32

PrintDlgW
GetOpenFileNameA

gdi32

EqualRgn
LPtoDP
PatBlt
GetEnhMetaFileHeader
RectInRegion
GetRegionData
BeginPath
CreateEnhMetaFileA
GetTextFaceW
MoveToEx

kernel32

GetTapeStatus
GetSystemTimeAdjustment
SetHandleCount
GetSystemDefaultLangID
Beep
SetConsoleWindowInfo
ExitProcess
LocalFileTimeToFileTime
EnumCalendarInfoA
SetCommMask
GetBinaryTypeW
GetCommandLineW
GetSystemTime
ReadConsoleA
GetComputerNameW
GetPrivateProfileStringW
WriteProcessMemory
CreateDirectoryW

user32

GetDlgItemTextA
GetTabbedTextExtentA
GetWindowTextLengthW
GetMenuItemInfoW
GetKeyboardType
RegisterWindowMessageW
TrackPopupMenu
EnumDisplaySettingsA
CheckMenuItem
ShowWindowAsync
PostThreadMessageA
IsIconic
DefFrameProcW
SetClassLongW
ModifyMenuA
EndMenu
GetDialogBaseUnits
DestroyAcceleratorTable

advapi32

IsTextUnicode
SetSecurityInfo
LookupPrivilegeNameA
StartServiceA
LockServiceDatabase
CreateProcessAsUserA
StartServiceCtrlDispatcherA
QueryServiceLockStatusW
CryptDestroyKey
RegEnumKeyA
CryptGetUserKey
CryptSetProvParam
InitiateSystemShutdownA
CreateServiceA

Sections

.text
Size: 4KB - Virtual size: 253KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1.8MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

396a8682f7b7b92e1cacb2f2d296caca

Headers

File Characteristics

Imports

comdlg32

gdi32

kernel32

user32

advapi32

Sections

.text Size: 4KB - Virtual size: 253KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 1.8MB - Virtual size: 1.8MB

.rsrc Size: 17KB - Virtual size: 16KB

.text
Size: 4KB - Virtual size: 253KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 1.8MB - Virtual size: 1.8MB

.rsrc
Size: 17KB - Virtual size: 16KB