a5e2c7c260691823cc3c0467e55cf263_JaffaCakes118

General

Target

a5e2c7c260691823cc3c0467e55cf263_JaffaCakes118
Size

32KB
MD5

a5e2c7c260691823cc3c0467e55cf263
SHA1

e6370fb4b0d447c7b2708ae07c1d2c6b25cdcc05
SHA256

6f028d1e75a30820f56024b27cbba28d6e48f7e5ab4e08914c20a0bcc18a334f
SHA512

f36fcb171074e804614be80182e9b4e471682be2ee5d5a072f887906b59fcdc1e8d2dc217a571594d31b86ff482af25d3be8d3cbb64973117d811d06f172242b
SSDEEP

384:6xWUcVYpq5gMwjBE61DLUYkAbEWpdU7Kp1WfKiojP/H2RFE5MXFPOMjULCbQKuAF:hLvgM81D3vp1qUjP/H2RFLPxU+btW+tL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a5e2c7c260691823cc3c0467e55cf263_JaffaCakes118

Files

a5e2c7c260691823cc3c0467e55cf263_JaffaCakes118
.exe windows:5 windows x86 arch:x86

4789540a16ecf2b452f1a1f22d6ffcfc

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

wpabaln.pdb

Imports

msvcrt

_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
_acmdln
exit
_cexit
_XcptFilter
_exit
_c_exit
??2@YAPAXI@Z
??3@YAXPAX@Z
__getmainargs
wcstok
_wtol

advapi32

RegOpenKeyExW
RegCloseKey
AllocateAndInitializeSid
CheckTokenMembership
FreeSid
RegQueryValueExW

kernel32

GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
UnhandledExceptionFilter
GetCommandLineW
InterlockedDecrement
GetModuleHandleW
FormatMessageW
GetLastError
LocalFree
ExpandEnvironmentStringsW
CreateProcessW
SetUnhandledExceptionFilter
GetModuleHandleA
GetStartupInfoA
QueryPerformanceCounter
CloseHandle
InterlockedIncrement

user32

DestroyIcon
LoadIconW

ole32

CoUninitialize
CoInitialize
CoCreateInstance

shlwapi

ord219

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 60B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

4789540a16ecf2b452f1a1f22d6ffcfc

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

msvcrt

advapi32

kernel32

user32

ole32

shlwapi

Sections

.text Size: 5KB - Virtual size: 4KB

.data Size: 512B - Virtual size: 60B

.rsrc Size: 26KB - Virtual size: 26KB

.text
Size: 5KB - Virtual size: 4KB

.data
Size: 512B - Virtual size: 60B

.rsrc
Size: 26KB - Virtual size: 26KB