b4e863360e1d14a175542e10f686a0b7_JaffaCakes118

General

Target

b4e863360e1d14a175542e10f686a0b7_JaffaCakes118
Size

255KB
MD5

b4e863360e1d14a175542e10f686a0b7
SHA1

27264e7a52db255fc5b5b7d5907df57a6cf232e7
SHA256

de76066ca8f6a8d700e840ef5c4e3601756b6a39bd993ba5fa30ed86089a00de
SHA512

c9596e14af992ad1cd8639b89ad65f1bb269de48b01a52eedc406234dc6db99a3e327e6fdba8c948062bce6b044ebab78876de0908798a5e2628c6456dc7b2ef
SSDEEP

6144:scpvcHas+QdNy4qTCqjTM5JsBOxzhoj2LOxnBcsed2:fpvjsTd0jTMskxqCaGsY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b4e863360e1d14a175542e10f686a0b7_JaffaCakes118

Files

b4e863360e1d14a175542e10f686a0b7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1679056dc18acac8e20eeb6d9dac23a1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

TlsGetValue
GetThreadPriority
GetDefaultCommConfigW
GetThreadTimes
GetOEMCP
GetConsoleCP
CancelWaitableTimer
CreateMutexA
VirtualAlloc
GetLargestConsoleWindowSize
GetThreadLocale
GetModuleHandleA
IsDBCSLeadByte
AddAtomA
GetUserDefaultLangID
GetExitCodeThread
CreatePipe
TlsFree
SetEvent
ReleaseMutex
CompareStringA

user32

GetActiveWindow
ShowWindow
IsIconic
InvalidateRect
RegisterClassA
ReleaseDC
GetDC
IsWindowVisible
GetFocus
GetWindowTextA
GetWindowTextLengthA
GetClassInfoExA
CloseWindow
GetSystemMetrics
GetClassNameA
ReleaseDC
GetWindow
ValidateRect
GetForegroundWindow

tapi32

MMCInitialize
MMCSetLineInfo
MMCSetPhoneInfo
MMCShutdown
MMCSetServerConfig

mlang

DllGetClassObject

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 720KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 40B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1679056dc18acac8e20eeb6d9dac23a1

Headers

File Characteristics

Imports

kernel32

user32

tapi32

mlang

Sections

.text Size: 3KB - Virtual size: 3KB

.rdata Size: 1KB - Virtual size: 1KB

.data Size: 1024B - Virtual size: 720KB

.tls Size: 512B - Virtual size: 40B

.rsrc Size: 68KB - Virtual size: 68KB

.text
Size: 3KB - Virtual size: 3KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 1024B - Virtual size: 720KB

.tls
Size: 512B - Virtual size: 40B

.rsrc
Size: 68KB - Virtual size: 68KB