bca61be0ce58bdc87bdcd2e697e1297c_JaffaCakes118

General

Target

bca61be0ce58bdc87bdcd2e697e1297c_JaffaCakes118
Size

115KB
MD5

bca61be0ce58bdc87bdcd2e697e1297c
SHA1

e1c80aef640278b894d8283fba845f6ad168c921
SHA256

4865355a5fbbb8d3d2b5d9251ed70cacef39725c133aceae67bfc42485e6c4a1
SHA512

6d70313e0e1e60cf25ee50a083f19ce5c0d2cdfa19ef3bd13c4a51f698604103cd0005fd08112b803d46427dcf1b94620580af4c5a92c7e016326d91d14abe12
SSDEEP

3072:4ediEDZS6bCTv/aGBcCkGREvsTwAzmY9wKMMiU1m9:4/8ZSTv/aYcCkGREETP9wKNP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bca61be0ce58bdc87bdcd2e697e1297c_JaffaCakes118

Files

bca61be0ce58bdc87bdcd2e697e1297c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9b78dc465aa49a435e17ef945d275bb2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

oleaut32

VariantCopyInd
VariantClear
SysFreeString
SysAllocStringLen
LoadTypeLib

advapi32

ControlService
StartServiceA
OpenProcessToken
SetSecurityDescriptorDacl
QueryServiceStatus

ole32

WriteFmtUserTypeStg
GetRunningObjectTable
GetConvertStg
CoDisconnectObject
CreateDataAdviseHolder
CreateBindCtx
CoTaskMemAlloc
CoGetMalloc
CoGetClassObject

user32

SetCursor
MessageBoxIndirectA
DrawIcon
DefDlgProcA
ShowOwnedPopups

shell32

SHGetFileInfoA
SHBindToParent
SHFileOperationA

shlwapi

PathFindExtensionA
PathCompactPathExA
PathCanonicalizeA
PathIsDirectoryA
PathQuoteSpacesA
PathUnquoteSpacesA

msvcrt

time
strstr
sprintf
memchr
rand
fflush
malloc
vsprintf

kernel32

TlsSetValue
lstrcatA
lstrcpyA
RaiseException
LocalAlloc
GetDateFormatA
FreeResource
FlushFileBuffers
EnumResourceLanguagesA
ReadFile

Exports

Exports

Fny
Fzm
Gye
Jaj
Mfk
Mnc
Qwh
Tqp
Vam
Vgv
Xbn
Xqd
Ygl

Sections

.text
Size: 29KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 29KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 21KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9b78dc465aa49a435e17ef945d275bb2

Headers

File Characteristics

Imports

oleaut32

advapi32

ole32

user32

shell32

shlwapi

msvcrt

kernel32

Exports

Exports

Sections

.text Size: 29KB - Virtual size: 32KB

.rdata Size: 29KB - Virtual size: 32KB

.data Size: 21KB - Virtual size: 24KB

.idata Size: 10KB - Virtual size: 12KB

.rsrc Size: 24KB - Virtual size: 28KB

.text
Size: 29KB - Virtual size: 32KB

.rdata
Size: 29KB - Virtual size: 32KB

.data
Size: 21KB - Virtual size: 24KB

.idata
Size: 10KB - Virtual size: 12KB

.rsrc
Size: 24KB - Virtual size: 28KB