5e8a10881f551ac4301a4f25ae9184bb_JaffaCakes118

General

Target

5e8a10881f551ac4301a4f25ae9184bb_JaffaCakes118
Size

11KB
MD5

5e8a10881f551ac4301a4f25ae9184bb
SHA1

22d8ffa521c018af1fbc37ae92d8d5754e92179b
SHA256

1b16ba309eb25eabfb263e5988b92cc05866a179c988e985534f5126f99fd852
SHA512

cf7cbdf720476aaacc969ea4f7cdf5ee59bb817c74c9781acfc03f6c4e92ae7c5a631968cf76189f9c0858a68a0a67925b91387a4c3c5f8f7f2c278c4f7c2a11
SSDEEP

192:adRFDvfazGp/PJoQalK/HWaprSDcIsV3jp+pB3Di:QRFDvyz03JDa8fT1/Isdj+3D

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5e8a10881f551ac4301a4f25ae9184bb_JaffaCakes118

Files

5e8a10881f551ac4301a4f25ae9184bb_JaffaCakes118
.dll windows:5 windows x86 arch:x86

10a2d4550a609bf5c8445a44e36bf90c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetLogicalDrives
GetModuleHandleW
WideCharToMultiByte
lstrcpynW
GetFileAttributesW
CreateFileW
lstrcmpW
MultiByteToWideChar
lstrlenW
GetLastError
GetProcAddress
GetCurrentProcess
FindFirstVolumeMountPointW
DeviceIoControl
lstrcmpiW
CloseHandle
GetVolumeNameForVolumeMountPointW
GetFileInformationByHandle
lstrcpyW
lstrcpyA
HeapAlloc
GetProcessHeap
HeapFree
lstrcpynA
lstrlenA
FindVolumeMountPointClose
GetFullPathNameW

user32

wsprintfA

advapi32

LookupPrivilegeValueW
AdjustTokenPrivileges
OpenProcessToken

Exports

Exports

ContentCompareFiles
ContentCompareFilesW
ContentEditValue
ContentGetSupportedField
ContentGetSupportedFieldFlags
ContentGetValue
ContentGetValueW
ContentSendStateInformation
ContentSendStateInformationW
ContentSetDefaultParams
ContentSetValue
ContentSetValueW

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 326B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

10a2d4550a609bf5c8445a44e36bf90c

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

Exports

Exports

Sections

.text Size: 8KB - Virtual size: 7KB

.data Size: - Virtual size: 12B

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 326B

.text
Size: 8KB - Virtual size: 7KB

.data
Size: - Virtual size: 12B

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 326B