bb890920edaf9786c10116ebcd4b7973_JaffaCakes118

General

Target

bb890920edaf9786c10116ebcd4b7973_JaffaCakes118
Size

56KB
MD5

bb890920edaf9786c10116ebcd4b7973
SHA1

b49ccc0bfcd87398968952db9c5732a44355b11f
SHA256

d00f6b4b0dd44ec3c7dad91b15ce939555f1ead2450039c46a281c5aa7c8d805
SHA512

881b3146bd9471c888595f9b211f7ad95e47f5439f103f134ffb9fc0a526f3ace9a64bd816d1ad03bf0552be09c647099f814963aaf5bfc139809ab906bc2572
SSDEEP

1536:uWZ0IyKMqdY8lJ0AQbq+L4S/sUhNAcbC:DZpDy88Vr9nhNVO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bb890920edaf9786c10116ebcd4b7973_JaffaCakes118

Files

bb890920edaf9786c10116ebcd4b7973_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

WlxActivateUserShell
WlxDisconnectNotify
WlxDisplayLockedNotice
WlxDisplaySASNotice
WlxDisplayStatusMessage
WlxGetConsoleSwitchCredentials
WlxGetStatusMessage
WlxInitialize
WlxIsLockOk
WlxIsLogoffOk
WlxLoggedOnSAS
WlxLoggedOutSAS
WlxLogoff
WlxNegotiate
WlxNetworkProviderLoad
WlxReconnectNotify
WlxRemoveStatusMessage
WlxScreenSaverNotify
WlxShutdown
WlxStartApplication
WlxWkstaLockedSAS
install

Sections

CODE
Size: 47KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 8KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 40KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Size: - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Headers

File Characteristics

Exports

Exports

Sections

CODE Size: 47KB - Virtual size: 8KB

DATA Size: 8KB - Virtual size: 16KB

BSS Size: - Virtual size: 24KB

.idata Size: 8KB - Virtual size: 8KB

.rdata Size: 40KB - Virtual size: 44KB

.rsrc Size: 4KB - Virtual size: 4KB

Size: - Virtual size: 15KB

CODE
Size: 47KB - Virtual size: 8KB

DATA
Size: 8KB - Virtual size: 16KB

BSS
Size: - Virtual size: 24KB

.idata
Size: 8KB - Virtual size: 8KB

.rdata
Size: 40KB - Virtual size: 44KB

.rsrc
Size: 4KB - Virtual size: 4KB