b4b06b5c6cb3c1fbf669eb18d443bd7f_JaffaCakes118

General

Target

b4b06b5c6cb3c1fbf669eb18d443bd7f_JaffaCakes118
Size

271KB
MD5

b4b06b5c6cb3c1fbf669eb18d443bd7f
SHA1

1b3c130015bc6203afdd5d79ae0cd75c4f86f549
SHA256

760ebdf88e9d14dc0694ef5f49dbcbdd61970df127fec8a7ff924e769a7985df
SHA512

77deb463cf6ac590800c60785be10257e80953c7643e10909b52a6d75d45be3b12a56c7136fd5014af477c864389ca9619852a25f69c8d7823bd8da9bb185ad3
SSDEEP

6144:8jZoi0BmS50TDj3v9g2L4XHSVGAOV8LMc6VEfySK9x3KBElM2:81oPXiT/vG3yMaMcGLSVBElD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b4b06b5c6cb3c1fbf669eb18d443bd7f_JaffaCakes118

Files

b4b06b5c6cb3c1fbf669eb18d443bd7f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8f829c7403d7f41cc1fd7b9ab19a10d1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

AreFileApisANSI
CallNamedPipeA
CreateDirectoryA
ExitProcess
GlobalReAlloc
HeapLock
InterlockedDecrement
SetConsoleCtrlHandler
SignalObjectAndWait
WritePrivateProfileStringW

advapi32

AddAce
CryptEncrypt
CryptImportKey
DeregisterEventSource
DuplicateToken
DuplicateTokenEx
EnumServicesStatusW
GetLengthSid
GetMultipleTrusteeW
ImpersonateSelf
LookupPrivilegeValueW
LookupSecurityDescriptorPartsA
ObjectDeleteAuditAlarmA
RegRestoreKeyA
StartServiceA

user32

CreateDialogIndirectParamA
EnumDesktopWindows
GetWindowDC
GetWindowLongA
LoadCursorFromFileW
OffsetRect
SendDlgItemMessageW

shell32

DragQueryFile
ExtractVersionResource16W
SHGetFileInfo
SHGetFileInfoA
SHGetMalloc
SHGetSettings
SheFullPathW
SheGetCurDrive
SheGetPathOffsetW
SheRemoveQuotesA
SheSetCurDrive
ShellAboutW
ShellExecuteEx
ShellHookProc
Shell_NotifyIconW

Sections

.text
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 266KB - Virtual size: 268KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 528KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8f829c7403d7f41cc1fd7b9ab19a10d1

Headers

File Characteristics

Imports

kernel32

advapi32

user32

shell32

Sections

.text Size: 512B - Virtual size: 4KB

.rdata Size: 1KB - Virtual size: 4KB

.data Size: 266KB - Virtual size: 268KB

.rsrc Size: 2KB - Virtual size: 528KB

.text
Size: 512B - Virtual size: 4KB

.rdata
Size: 1KB - Virtual size: 4KB

.data
Size: 266KB - Virtual size: 268KB

.rsrc
Size: 2KB - Virtual size: 528KB