acb7e91822bec76e1bb194a529eae50c_JaffaCakes118

General

Target

acb7e91822bec76e1bb194a529eae50c_JaffaCakes118
Size

271KB
MD5

acb7e91822bec76e1bb194a529eae50c
SHA1

6d5d75426c0d766bfc0b137d0de467015f03301b
SHA256

17e1289cdf56acdf201a9e544918ff0bec0a4ba11d1c92b04e5da668ae716965
SHA512

eb1447ca3b6d2cccde8c545fdf787eeec2b9eb9e883c8a1c08df7a17ee64b72f3daeebc145a34496b7f89596cc1d3e204f71e367cf575c6b3af75a8ecf8501e4
SSDEEP

6144:3myLws0CNH0BxIg/qgktEf7qZukofcYu8sOQqQHnHk7mH4uHSpvH:Ks7NH0Bxj3kyyyju9OjQHnEAH0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
acb7e91822bec76e1bb194a529eae50c_JaffaCakes118

Files

acb7e91822bec76e1bb194a529eae50c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0b8175adf684ac6b64981c51a1da58bd

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

CompareFileTime
ConvertDefaultLocale
EnumTimeFormatsW
ExitProcess
GetCalendarInfoW
GetEnvironmentStringsA
GetPrivateProfileSectionW
GetProfileStringW
GetSystemTime
GetTempPathW

advapi32

BuildTrusteeWithNameW
CancelOverlappedAccess
CryptSetProviderExA
GetAuditedPermissionsFromAclA
GetNamedSecurityInfoW
GetOverlappedAccessResults
GetSidSubAuthorityCount
OpenProcessToken
RegCreateKeyExW
RegEnumKeyExA
RegisterServiceCtrlHandlerA
SetSecurityInfoExW
UnlockServiceDatabase

user32

ActivateKeyboardLayout
CharNextA
DefFrameProcW
DlgDirSelectComboBoxExA
DrawStateA
GetDlgCtrlID
GetMenuBarInfo
GetSysColorBrush
GetWindowModuleFileNameW
IsZoomed
SendNotifyMessageA
SetParent

shell32

DoEnvironmentSubstW
SHEmptyRecycleBinA
SHGetPathFromIDList
SHGetSpecialFolderLocation
SheGetCurDrive
SheGetDirW
SheRemoveQuotesW
ShellAboutW

Sections

.text
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 266KB - Virtual size: 268KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 528KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0b8175adf684ac6b64981c51a1da58bd

Headers

File Characteristics

Imports

kernel32

advapi32

user32

shell32

Sections

.text Size: 512B - Virtual size: 4KB

.rdata Size: 1KB - Virtual size: 4KB

.data Size: 266KB - Virtual size: 268KB

.rsrc Size: 2KB - Virtual size: 528KB

.text
Size: 512B - Virtual size: 4KB

.rdata
Size: 1KB - Virtual size: 4KB

.data
Size: 266KB - Virtual size: 268KB

.rsrc
Size: 2KB - Virtual size: 528KB