d33308f22275aa03004c8d727128cac8_JaffaCakes118

General

Target

d33308f22275aa03004c8d727128cac8_JaffaCakes118
Size

23KB
MD5

d33308f22275aa03004c8d727128cac8
SHA1

3af5d615654ce5b759ab1183956037285ebb4511
SHA256

c78107f1aaf91b25c4055cf6f23904cbf9d0a9b402cbd41bf47ad47f3ad67446
SHA512

9600cad9adc85801bf05e855b00ba4aa978be3a3511dffab208975106aa9295c75ed335c949cd653b71dc6f0454e3d591a2a578cf0207e5e293bf03b1368ef91
SSDEEP

384:3lgyG1a087GZSxBSQOHT5Xr7ODTBPkCG8qaqaqGHHnHHnHHo8M+E48a9aKYu9:Ga087GZ2BSQ2JnOnBbnnnnnmC5UKY+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d33308f22275aa03004c8d727128cac8_JaffaCakes118

Files

d33308f22275aa03004c8d727128cac8_JaffaCakes118
.exe windows:5 windows x86 arch:x86

84a8773c1ad55dcd1b50c80e39cd4f0c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

BuildCommDCBAndTimeoutsW
FatalAppExitA
VirtualAllocEx
RtlMoveMemory
SetComputerNameA
GetConsoleCommandHistoryLengthA
GetBinaryType
EndUpdateResourceW
FreeEnvironmentStringsA
GetCommProperties
FoldStringA
GetStringTypeExA
ReadConsoleOutputW
VirtualQueryEx
UpdateResourceA

msvcrt

_strnset
_ismbbgraph
_Gettnames
_spawnlpe
strstr
_wexecvpe
__dllonexit
_strupr
_wfreopen
_mbctombb

user32

SetWindowsHookExW
CreateIconFromResource
GetWindowTextA
DispatchMessageA
DdeCreateStringHandleW
TranslateMessage
GetTabbedTextExtentW
SetConsoleReserveKeys

ole32

OleCreateLinkFromDataEx
CoQueryClientBlanket
CoGetStdMarshalEx
OleIsRunning
OleConvertIStorageToOLESTREAM
WdtpInterfacePointer_UserSize
WdtpInterfacePointer_UserSize

advapi32

PrivilegedServiceAuditAlarmA
RegConnectRegistryW
DeregisterEventSource
I_ScGetCurrentGroupStateW
SystemFunction014
WmiEnumerateGuids
ConvertSecurityDescriptorToAccessW
DuplicateToken
GetSidSubAuthorityCount

gdi32

FONTOBJ_pfdg
FillPath
GdiInitSpool
UnloadNetworkFonts
GdiGetLocalFont
GetStockObject

Sections

.text
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

84a8773c1ad55dcd1b50c80e39cd4f0c

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

msvcrt

user32

ole32

advapi32

gdi32

Sections

.text Size: 19KB - Virtual size: 19KB

.data Size: 2KB - Virtual size: 3KB

.rsrc Size: 1024B - Virtual size: 4KB

.text
Size: 19KB - Virtual size: 19KB

.data
Size: 2KB - Virtual size: 3KB

.rsrc
Size: 1024B - Virtual size: 4KB