fa9714416438d53bdf340326b64c0862_JaffaCakes118

General

Target

fa9714416438d53bdf340326b64c0862_JaffaCakes118
Size

264KB
MD5

fa9714416438d53bdf340326b64c0862
SHA1

080f61e51b8b8f5b7d0df785f3481d424c7a48c4
SHA256

a093b2211b575445142900cb33ee4e861fb4f180301c4ae725eb4c7eab76cf4a
SHA512

c3b148cb5bdd685908dd9e7293b882259f09135e8e7dd018622dfcd788bbce6343c613b65836831b327a2c590dd595de9f22cecbb830a5921961efddaee59865
SSDEEP

6144:pljID0CcAk/ny5aU8U8mC3b5P7Z8ZJ1rQeKc:pljIYCuysBxmOVPM1sc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fa9714416438d53bdf340326b64c0862_JaffaCakes118

Files

fa9714416438d53bdf340326b64c0862_JaffaCakes118
.exe windows:4 windows x86 arch:x86

33d3cbd7ed6d7006031469031c60a0a0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLargestConsoleWindowSize
GetThreadPriority
ReleaseMutex
CompareStringA
GetUserDefaultLangID
PulseEvent
GetConsoleCP
SetEvent
AddAtomA
IsDBCSLeadByte
TlsGetValue
GetOEMCP
GetThreadLocale
CreateMutexA
CallNamedPipeA
GetThreadTimes
TlsFree
GetExitCodeThread
GetModuleHandleA
GetDefaultCommConfigA
VirtualAlloc

user32

GetForegroundWindow
GetWindow
GetWindowTextLengthA
GetDC
ReleaseDC
CloseWindow
IsIconic
InvalidateRect
ShowWindow
GetWindowTextA
IsWindowVisible
GetActiveWindow
GetFocus
ReleaseDC
GetClassNameA
GetSystemMetrics
ValidateRect
GetClassInfoExA
RegisterClassA

tapi32

MMCSetServerConfig
MMCShutdown
MMCSetLineInfo
MMCInitialize
MMCSetPhoneInfo

mlang

DllGetClassObject

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 896KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 40B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 76KB - Virtual size: 75KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

33d3cbd7ed6d7006031469031c60a0a0

Headers

File Characteristics

Imports

kernel32

user32

tapi32

mlang

Sections

.text Size: 3KB - Virtual size: 3KB

.rdata Size: 1KB - Virtual size: 1KB

.data Size: 1024B - Virtual size: 896KB

.tls Size: 512B - Virtual size: 40B

.rsrc Size: 76KB - Virtual size: 75KB

.text
Size: 3KB - Virtual size: 3KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 1024B - Virtual size: 896KB

.tls
Size: 512B - Virtual size: 40B

.rsrc
Size: 76KB - Virtual size: 75KB