da1ad0b2e51baff7fa2768b85a7453a9_JaffaCakes118

General

Target

da1ad0b2e51baff7fa2768b85a7453a9_JaffaCakes118
Size

57KB
MD5

da1ad0b2e51baff7fa2768b85a7453a9
SHA1

4e1f3120b4cf98bf32ab4839ca09c99d3de1ef23
SHA256

38f397e5b84fe52c0d6fe999c0cb5a7a87723f92246cd967a53c9267d5e3091a
SHA512

e76226f0c967f9b6cb0aee04b38f479a10fdc0fdbfbc0fde1242526c483f6fa8ae95f96c5fbac7505c2b5d04fd5faed884d234b804935877a510e58c3984b116
SSDEEP

768:5kT235yWbvO5Wb60qANKQ3uIG7GvsYLoeOFVULpNLh1M1bUMM:5N3gWj4c6LANKyuIGFYEeguVNLhkUf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
da1ad0b2e51baff7fa2768b85a7453a9_JaffaCakes118

Files

da1ad0b2e51baff7fa2768b85a7453a9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c30d59c01eb6ebc8651384fae20db1ae

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentProcessId
GetCurrentThreadId
GetTickCount
ExitProcess
InitializeCriticalSection
TlsAlloc
QueryPerformanceFrequency
QueryPerformanceCounter
Sleep
GetACP
GetFileAttributesA
FreeLibrary
GetModuleHandleA
BeginUpdateResourceW
GetProcAddress

query

CIState
CIBuildQueryTree
InitializeCIPerformanceData
CIBuildQueryNode
CIMakeICommand
CollectCIISAPIPerformanceData
DllRegisterServer
SetupCacheEx
DoneFILTERPerformanceData

mscat32

CryptCATEnumerateMember
CryptCATPutAttrInfo
CryptCATAdminReleaseContext
CryptCATEnumerateAttr
CryptCATOpen

Sections

.icode
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 14KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 8KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 372KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 12KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c30d59c01eb6ebc8651384fae20db1ae

Headers

File Characteristics

Imports

kernel32

query

mscat32

Sections

.icode Size: 10KB - Virtual size: 9KB

.text Size: 14KB - Virtual size: 16KB

.rdata Size: 1024B - Virtual size: 39KB

.edata Size: 8KB - Virtual size: 16KB

.data Size: 6KB - Virtual size: 372KB

.edata Size: 12KB - Virtual size: 48KB

.rsrc Size: 4KB - Virtual size: 3KB

.icode
Size: 10KB - Virtual size: 9KB

.text
Size: 14KB - Virtual size: 16KB

.rdata
Size: 1024B - Virtual size: 39KB

.edata
Size: 8KB - Virtual size: 16KB

.data
Size: 6KB - Virtual size: 372KB

.edata
Size: 12KB - Virtual size: 48KB

.rsrc
Size: 4KB - Virtual size: 3KB