f70b1eb04f85a3f31f7fac95696bf990_JaffaCakes118

General

Target

f70b1eb04f85a3f31f7fac95696bf990_JaffaCakes118
Size

23KB
MD5

f70b1eb04f85a3f31f7fac95696bf990
SHA1

595dd0572966a742ccc1df49f69ab2b00d696a18
SHA256

eecac1343d3888608bd6544a3214979c08fd63961332c6964cced7189fdf96e1
SHA512

bd5982759aaf11079c68ada7f95bbb091e8700022fc9728c74bb2e71370ce805a9d95c914e9fef5281f5122e25e27d1f9ef3fc3035aea96d28c7f99cd2c67a85
SSDEEP

384:su5hG4T7qOBzjD13zrDuaQw5cd7W8EF/J7XrQeuavc:VhGe7vBzn1XDua2dCdJ77buaU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f70b1eb04f85a3f31f7fac95696bf990_JaffaCakes118

Files

f70b1eb04f85a3f31f7fac95696bf990_JaffaCakes118
.exe windows:5 windows x86 arch:x86

83d87678c8fc6440b94d32bef24a2142

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

InitiateSystemShutdownExA
SystemFunction004
LookupPrivilegeValueW
GetCurrentHwProfileA
AccessCheckByTypeAndAuditAlarmA
EnumDependentServicesW
StartTraceW
GetWindowsAccountDomainSid
CryptAcquireContextA

ole32

OleInitializeWOW
CoEnableCallCancellation
CreateClassMoniker
CoMarshalInterface
PropStgNameToFmtId
HPALETTE_UserSize
CoFileTimeNow

gdi32

GdiEndDocEMF
DeleteEnhMetaFile
SelectObject
GdiCreateLocalEnhMetaFile
XLATEOBJ_iXlate
GdiEntry3

kernel32

FillConsoleOutputCharacterW
VirtualUnlock
DosDateTimeToFileTime
GetThreadContext
IsBadWritePtr
SetProcessWorkingSetSize
ReplaceFileA
IsDebuggerPresent
SetSystemTime
GetDefaultCommConfigA
SetEnvironmentVariableA
GetEnvironmentStringsA
Beep
OutputDebugStringW
FreeUserPhysicalPages

msvcrt

_adj_fprem1
_isnan
wcsstr
rewind
fflush
_timezone
_strrev
_fsopen
__doserrno
tanh

user32

TranslateMessageEx
RedrawWindow
EnableScrollBar
SendMessageCallbackW
GetSysColor
TranslateAcceleratorA
IMPGetIMEA
GetDlgItemInt

Sections

.text
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

83d87678c8fc6440b94d32bef24a2142

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

ole32

gdi32

kernel32

msvcrt

user32

Sections

.text Size: 19KB - Virtual size: 19KB

.data Size: 2KB - Virtual size: 3KB

.rsrc Size: 1024B - Virtual size: 5KB

.text
Size: 19KB - Virtual size: 19KB

.data
Size: 2KB - Virtual size: 3KB

.rsrc
Size: 1024B - Virtual size: 5KB