5a635a1c13467bb46521a7d1a18c6503_JaffaCakes118

General

Target

5a635a1c13467bb46521a7d1a18c6503_JaffaCakes118
Size

207KB
MD5

5a635a1c13467bb46521a7d1a18c6503
SHA1

a724d11c9c8c2ef8de7fbb50478fc9f3aba1f2d8
SHA256

6cc103886bf4924504d2a5fd6cce16d40f00a0daa8fbf0589657104b678fea89
SHA512

5b229bc5aa86f947899d1d2c3a6d774e35166686ef421b79fb9c60c8367b591c410db32af09db1c3e4cb223f8ab73f5b1921d20a61473daa9e1920cad8b2310b
SSDEEP

6144:RyjExotRmmpRUylhdBEIZxAvX5ALtluGtC:Ryj9t0g2ylHZOxalQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5a635a1c13467bb46521a7d1a18c6503_JaffaCakes118

Files

5a635a1c13467bb46521a7d1a18c6503_JaffaCakes118
.exe windows:4 windows x86 arch:x86

fad091c1de598430839e8549c5a06002

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

rpcrt4

RpcBindingSetAuthInfoA
RpcStringBindingComposeA
NdrClientCall
RpcBindingFromStringBindingA
RpcStringFreeA

user32

SetScrollRange
EmptyClipboard
CallNextHookEx
ToAscii
UnhookWindowsHookEx
RealGetWindowClass
GetSysColorBrush
SetWindowPos
RegisterClassW
ChildWindowFromPoint
SetClipboardData
IsClipboardFormatAvailable
SetWindowsHookExW
ClipCursor
DefWindowProcW
WinHelpW
DestroyCursor
DestroyIcon
DrawEdge
GetSysColor

comctl32

ImageList_Add
ImageList_Create
ImageList_GetIconSize
ImageList_DrawEx
ImageList_Destroy

kernel32

CreateFiber
GetFileAttributesA
SearchPathW
FindResourceExA
FlushFileBuffers
LockFile
TerminateProcess
GetVolumeInformationW
GetFileTime
CompareStringW
IsDBCSLeadByte
FileTimeToLocalFileTime
UnlockFile
EnumResourceNamesA
FileTimeToSystemTime
GetVersionExW
FlushFileBuffers
GetUserDefaultLangID
LocalAlloc
GetFileType
GetSystemTime
VerLanguageNameW
GetProfileStringW
SetEndOfFile
GetSystemDirectoryW

comdlg32

GetFileTitleA

Sections

.text
Size: 187KB - Virtual size: 187KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fad091c1de598430839e8549c5a06002

Headers

File Characteristics

Imports

rpcrt4

user32

comctl32

kernel32

comdlg32

Sections

.text Size: 187KB - Virtual size: 187KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 16KB - Virtual size: 16KB

.tls Size: 512B - Virtual size: 92KB

.text
Size: 187KB - Virtual size: 187KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 16KB - Virtual size: 16KB

.tls
Size: 512B - Virtual size: 92KB