fe390faa97424cdfca2eaab1bc0557b1_JaffaCakes118

General

Target

fe390faa97424cdfca2eaab1bc0557b1_JaffaCakes118
Size

328KB
MD5

fe390faa97424cdfca2eaab1bc0557b1
SHA1

05f157cde8daab06d5093e27462d3622bd082c7a
SHA256

7023752e72c55353fd6fbe9b7c93335d248a6acebf68ff8478c3ddc438f7366d
SHA512

5bcbb9a91cac8a92a1e64ce845b9a07d0a2737dd8fb7ea92373c9ea0a7c746e9d7bf4e306f86b20a2a645b252496278d2d05f948833ddaa9b04c05425a2cbf45
SSDEEP

6144:sl5DMtfewvG7GwnwmARzvwct2FMEO6YR2cqsMfmgszg61SCRkQOF:4hff4wS2FM9q4gegiSCRkQG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fe390faa97424cdfca2eaab1bc0557b1_JaffaCakes118

Files

fe390faa97424cdfca2eaab1bc0557b1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

081f434041b9786b9f242d741d028424

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

StgOpenPropStg
CoGetObject
OleSetMenuDescriptor
BindMoniker
PropVariantClear
OleRegGetMiscStatus
OleCreateDefaultHandler
OleNoteObjectVisible
CoFileTimeToDosDateTime
OleLoadFromStream
CoRegisterPSClsid
GetRunningObjectTable
IIDFromString
CoTaskMemAlloc

gdi32

CopyEnhMetaFileA
CreateCompatibleDC
AbortDoc
EnumObjects
CombineRgn
GetBrushOrgEx
GetBitmapDimensionEx
EqualRgn
CopyEnhMetaFileW
CreateDiscardableBitmap
CloseMetaFile

comctl32

ord6
CreateStatusWindowW
ord16
PropertySheetA
CreatePropertySheetPageW
ord8
ord3
ord14

shlwapi

StrStrA
StrRStrIW
StrRChrIW
StrCSpnW
StrChrIW
StrToIntA

kernel32

FreeEnvironmentStringsA
LocalHandle
HeapLock
GetProcAddress
GetModuleFileNameA
GetEnvironmentStrings
QueryPerformanceCounter
TlsGetValue
GetTickCount
TlsSetValue
VirtualAlloc
GetCommandLineA
GetModuleHandleA
GetStartupInfoA
MultiByteToWideChar
GetNumberFormatA
LeaveCriticalSection
VirtualAllocEx
LCMapStringA
IsBadWritePtr
HeapAlloc
EnterCriticalSection
SetLocaleInfoA
GetACP

msvcrt

__setusermatherr
_exit
_controlfp
_except_handler3
exit
_acmdln
__getmainargs
_initterm
_XcptFilter
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 313KB - Virtual size: 313KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 93KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

081f434041b9786b9f242d741d028424

Headers

File Characteristics

Imports

ole32

gdi32

comctl32

shlwapi

kernel32

msvcrt

Sections

.text Size: 10KB - Virtual size: 10KB

.rdata Size: 313KB - Virtual size: 313KB

.data Size: 512B - Virtual size: 93KB

.rsrc Size: 6KB - Virtual size: 6KB

.text
Size: 10KB - Virtual size: 10KB

.rdata
Size: 313KB - Virtual size: 313KB

.data
Size: 512B - Virtual size: 93KB

.rsrc
Size: 6KB - Virtual size: 6KB