080ba5ec84c2b9a51c5de725df7d9378_JaffaCakes118

General

Target

080ba5ec84c2b9a51c5de725df7d9378_JaffaCakes118
Size

269KB
MD5

080ba5ec84c2b9a51c5de725df7d9378
SHA1

82263092737c2f9579a82bf0290f1e94b7861a1c
SHA256

f52aef8d60738542c3e9415e7a085e666a1eb8f7cfbde56cd3f34592ae7393f5
SHA512

270009a2a5075e59688a9d788a6c3412fca7c4ef7749a91b9b4004dcf87ac3760b1b0ef7a1b6ebf1d5787c6d4024c3ba3d4d953a9e123ce3594fd5f96055e7a5
SSDEEP

6144:bhnjnzte7VBAqraluXxiF81whcw1ule0bwq5Em:9jnRmVBjGuxiF8ZgI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
080ba5ec84c2b9a51c5de725df7d9378_JaffaCakes118

Files

080ba5ec84c2b9a51c5de725df7d9378_JaffaCakes118
.dll windows:4 windows x86 arch:x86

58e2ebf935ed74cc2977482e75d365b2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
CreateConsoleScreenBuffer
DisableThreadLibraryCalls
ExitProcess
GetACP
GetCommandLineA
GetModuleHandleA
GetOEMCP
GetStartupInfoA
GetStdHandle
GetStringTypeA
GetUserDefaultLCID
GetVersionExA
HeapAlloc
HeapCreate
HeapDestroy
HeapReAlloc
InitializeCriticalSection
IsDebuggerPresent
MultiByteToWideChar
RtlUnwind
SetLastError
SetProcessWorkingSetSize
SetStdHandle
SetUnhandledExceptionFilter
SizeofResource
lstrcmpA

user32

SystemParametersInfoA
MessageBoxA
IsZoomed
CreateMenu
CreateIconIndirect
BeginPaint

advapi32

SetPrivateObjectSecurityEx
SetSecurityDescriptorOwner
ReportEventA
RegOpenKeyExW
QueryServiceConfigW
LsaQueryInfoTrustedDomain
LsaLookupNames

ole32

IsEqualGUID
StringFromGUID2
CoCreateInstance
CoCreateGuid
CoTaskMemFree

opengl32

glGetMapiv
glVertex2d
glVertex4dv

Exports

Exports

CreateBlockAccessFromImage
EnumBaseImageDataPropertyRelease
GetObjectInfo

Sections

.text
Size: 175KB - Virtual size: 184KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 89KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

58e2ebf935ed74cc2977482e75d365b2

Headers

File Characteristics

Imports

kernel32

user32

advapi32

ole32

opengl32

Exports

Exports

Sections

.text Size: 175KB - Virtual size: 184KB

.data Size: 89KB - Virtual size: 92KB

.rsrc Size: 3KB - Virtual size: 4KB

.reloc Size: 1024B - Virtual size: 4KB

.text
Size: 175KB - Virtual size: 184KB

.data
Size: 89KB - Virtual size: 92KB

.rsrc
Size: 3KB - Virtual size: 4KB

.reloc
Size: 1024B - Virtual size: 4KB