b1dd68e4e1db74b818fa49721e682fdd_JaffaCakes118

General

Target

b1dd68e4e1db74b818fa49721e682fdd_JaffaCakes118
Size

403KB
MD5

b1dd68e4e1db74b818fa49721e682fdd
SHA1

5dfc144441023e5de9117d1d65f52e287c84df9a
SHA256

adc46edce580b4f699899dd8e7b2ff602163216c25ad4acee36a83af5813c8cb
SHA512

edcb8675c0eb78586e9a8e7505b197e2ca9536227eb751496f2e5a1466c7c3e1348197ddcf2e4615be648d338a03abcd86bffa07abb4d6ffe34e1f57be68eee6
SSDEEP

12288:xqI1VnbqEejBGjzR+mwZYjt2cxnAhPTi:j1Bleje9+nLclAhPTi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b1dd68e4e1db74b818fa49721e682fdd_JaffaCakes118

Files

b1dd68e4e1db74b818fa49721e682fdd_JaffaCakes118
.exe windows:5 windows x86 arch:x86

3e5f8c0f62bf1e46dcfaffddd14aca61

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_tzset
_mbbtype
_fpieee_flt
_wfindnexti64
_wgetenv
_ismbbgraph
_ismbcpunct
_fputwchar
towupper
ctime

gdi32

GetArcDirection
ExtCreatePen
GetDCOrgEx
OffsetClipRgn
GdiEndPageEMF

kernel32

VirtualProtect
HeapFree
ReadConsoleA
GetCommConfig
FreeResource
GetModuleHandleA
SetComputerNameW
GetConsoleAliasesW
GetDiskFreeSpaceA
GetStartupInfoA
EnumResourceNamesA
GetWindowsDirectoryA
GetCommandLineA
InitializeCriticalSectionAndSpinCount
GetCalendarInfoA
InitializeCriticalSectionAndSpinCount
Heap32Next

advapi32

GetSidLengthRequired
GetCurrentHwProfileA
ConvertSDToStringSDRootDomainW
RegSetKeySecurity
SystemFunction006
QueryServiceConfigA
LsaNtStatusToWinError
ConvertToAutoInheritPrivateObjectSecurity
SystemFunction026

user32

GetForegroundWindow
LoadRemoteFonts
EnumWindows
SetClipboardViewer
GetMessageA
RemoveMenu
EnumPropsExA
wvsprintfA

Sections

.text
Size: 396KB - Virtual size: 396KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 564KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 828B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3e5f8c0f62bf1e46dcfaffddd14aca61

Headers

DLL Characteristics

File Characteristics

Imports

msvcrt

gdi32

kernel32

advapi32

user32

Sections

.text Size: 396KB - Virtual size: 396KB

.data Size: 5KB - Virtual size: 564KB

.rsrc Size: 1024B - Virtual size: 828B

.text
Size: 396KB - Virtual size: 396KB

.data
Size: 5KB - Virtual size: 564KB

.rsrc
Size: 1024B - Virtual size: 828B