763716c7cbf19a7fbc1d7cb5a04f2ea0_JaffaCakes118

General

Target

763716c7cbf19a7fbc1d7cb5a04f2ea0_JaffaCakes118
Size

24KB
MD5

763716c7cbf19a7fbc1d7cb5a04f2ea0
SHA1

fe5e6d4102f99302d3e28b9744724c6647ce5ca4
SHA256

f7a6b6e6bf651ba87583a2694ab99eb68c8f976c5f0f7c8fb0f61be95b32d870
SHA512

e88796a5fba034feb5a4f69561ba3bdd9019361153afd8e731947e4657f8a1c355ba38dc22763dd5af166e59f00d732bf37cfa510b31af4ccce6d1b439431bda
SSDEEP

384:pm2kJlQT108xFji6qK0j0QXIAhwEY8iBCBqBui+JSGIf:6JlSh3+TFAsI+iBCWRGIf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
763716c7cbf19a7fbc1d7cb5a04f2ea0_JaffaCakes118

Files

763716c7cbf19a7fbc1d7cb5a04f2ea0_JaffaCakes118
.exe windows:5 windows x86 arch:x86

99ea52f4386f496d6ddd46f227c7b43f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

StgOpenStorageOnILockBytes
WdtpInterfacePointer_UserFree
OleBuildVersion
HMENU_UserFree
CoGetContextToken
HACCEL_UserSize

user32

SetCursorPos
GetInternalWindowPos
GetPropW
WinHelpA
GetClassNameA
InvalidateRgn
VTagOutput
SetShellWindow

kernel32

GetCommandLineA
LockResource
RequestDeviceWakeup
lstrcmpiW
Beep
SetThreadAffinityMask
GetModuleHandleA
SetConsoleLocalEUDC
GetStartupInfoA
SetConsoleFont
LocalAlloc
GetProfileIntW
DeleteTimerQueueTimer
SetComputerNameA
lstrcatW

msvcrt

_lseek
_spawnv
_mbscat
fmod
_execl
memchr
_except_handler2
_heapmin
_dup
__p__commode

advapi32

EncryptFileA
ImpersonateNamedPipeClient
RegSetKeySecurity
AccessCheckByTypeResultListAndAuditAlarmByHandleA
LookupPrivilegeValueW
SystemFunction024
ControlTraceA
GetKernelObjectSecurity
RegFlushKey

gdi32

GdiConvertFont
FONTOBJ_cGetGlyphs
GdiEntry5
GdiConvertAndCheckDC
SetMetaRgn

Sections

.text
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 828B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

99ea52f4386f496d6ddd46f227c7b43f

Headers

DLL Characteristics

File Characteristics

Imports

ole32

user32

kernel32

msvcrt

advapi32

gdi32

Sections

.text Size: 20KB - Virtual size: 20KB

.data Size: 2KB - Virtual size: 2KB

.rsrc Size: 1024B - Virtual size: 828B

.text
Size: 20KB - Virtual size: 20KB

.data
Size: 2KB - Virtual size: 2KB

.rsrc
Size: 1024B - Virtual size: 828B