7387f4894a644fe32fb604acf7133612_JaffaCakes118

General

Target

7387f4894a644fe32fb604acf7133612_JaffaCakes118
Size

51KB
MD5

7387f4894a644fe32fb604acf7133612
SHA1

4702b87d84172e3a96f5bb7d913e0b3387c73dd0
SHA256

9594cc2ab929e4f7a19b59f1d8f081a9355afe0d49035d6a467d634d107703cf
SHA512

c56a4778448b3b27b9ca1ef5ab492f03b57fe887d146da15a556b013d8676ec2134e652f82c68f3dd202f4a21c73bd3033074e8a34d0f949542f93a852a81802
SSDEEP

1536:wgbA2bgKVGLA6xbXS1LftI6xBjuj2p8IVN:nFbgKwL7x+CyBj6IVN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7387f4894a644fe32fb604acf7133612_JaffaCakes118

Files

7387f4894a644fe32fb604acf7133612_JaffaCakes118
.exe windows:4 windows x86 arch:x86

df05c71dd93ddaafd01d0a11f3aff649

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetSystemMetrics
ExitWindowsEx
DrawMenuBar
DispatchMessageA
DefMDIChildProcA

kernel32

SetLastError
lstrlenW
lstrcpynA
VirtualQueryEx
SetProcessWorkingSetSize
CloseHandle
CompareStringA
CreateEventA
CreateFileMappingA
ExitProcess
ExitThread
GetCommandLineA
GetCommandLineW
GetLocaleInfoA
GetLocaleInfoW
GetModuleFileNameA
GetModuleHandleA
GetStartupInfoA
GetTickCount
GetVersionExA
HeapAlloc
HeapCreate
HeapReAlloc
InterlockedIncrement
IsValidLocale
LCMapStringA
LocalFree
MultiByteToWideChar
OutputDebugStringA
RtlUnwind
SearchPathA
SetEnvironmentVariableA

setupapi

SetupDiGetHwProfileListExW
SetupDiGetDeviceInterfaceDetailW
SetupDiDestroyDeviceInfoList
SetupDiCallClassInstaller

olepro32

OleCreatePropertyFrame
OleIconToCursor
OleCreatePropertyFrameIndirect

oleacc

GetRoleTextW
GetStateTextA
LresultFromObject
CreateStdAccessibleProxyW
GetOleaccVersionInfo
AccessibleChildren
AccessibleObjectFromEvent

advapi32

RegEnumKeyW
RegLoadKeyA
StartServiceW
CryptEnumProviderTypesA

security

InitSecurityInterfaceW
FreeCredentialsHandle
AcquireCredentialsHandleA
RevertSecurityContext

Sections

.text
Size: 38KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

df05c71dd93ddaafd01d0a11f3aff649

Headers

File Characteristics

Imports

user32

kernel32

setupapi

olepro32

oleacc

advapi32

security

Sections

.text Size: 38KB - Virtual size: 40KB

.data Size: 9KB - Virtual size: 12KB

.rsrc Size: 1KB - Virtual size: 4KB

.reloc Size: 1024B - Virtual size: 4KB

.text
Size: 38KB - Virtual size: 40KB

.data
Size: 9KB - Virtual size: 12KB

.rsrc
Size: 1KB - Virtual size: 4KB

.reloc
Size: 1024B - Virtual size: 4KB