0e1a43f39898ebf3d735f81d967710b6_JaffaCakes118

General

Target

0e1a43f39898ebf3d735f81d967710b6_JaffaCakes118
Size

154KB
MD5

0e1a43f39898ebf3d735f81d967710b6
SHA1

d8a24c8326d0c3c4fc0848e14084fdb65851ce5b
SHA256

7d7f816da57979beec6bc323923f92f6dcb2da0030427e8baa3c4913c1af52aa
SHA512

a0f02c4bd13b78c0a28a9fb748d17d38fbf15c1c05da241ad548bf09b6d37f33a4faac2b31ce541a41b321b0aa47d33d5c231b800cbe9e1f95c1f2abc647a780
SSDEEP

1536:icAImTgMtgpAzcvkGuk9aUL5dweoQmyHigFSk9Wf8bJ54QDnsebiy4Ct0047koVj:ictmTg4gfsGlaULECrnFBD0UDMwqV5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0e1a43f39898ebf3d735f81d967710b6_JaffaCakes118

Files

0e1a43f39898ebf3d735f81d967710b6_JaffaCakes118
.dll windows:4 windows x86 arch:x86

fd4c4e4f593c8a6fa7016b239b9fd4c5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

advapi32

RegOpenKeyExA
RegCloseKey

kernel32

CloseHandle
CreateFileA
ExitProcess
FlushFileBuffers
FreeEnvironmentStringsA
GetCommandLineA
GetEnvironmentStringsA
GetFileSize
GetFileType
GetLastError
GetModuleHandleA
GetStartupInfoA
GetSystemInfo
GetVersionExA
GlobalAlloc
GlobalFree
GlobalReAlloc
MultiByteToWideChar
OutputDebugStringA
ReadFile
SetEndOfFile
SetErrorMode
SetFilePointer
SetLastError
Sleep
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
WideCharToMultiByte
WriteFile

ole32

CoInitialize
CoUninitialize

oleaut32

SafeArrayCreate
SysAllocStringByteLen
SysFreeString
SysStringByteLen
VariantClear
VariantCopy

\drake04\ft\fileio

SETSTATEREFERENCE

\drake04\ft\daycount

JULIANDATE

\drake04\ft\layout

LAYOUT
OVERRIDESTR
OVERRIDE

Exports

Exports

IDI2

Sections

.text
Size: 142KB - Virtual size: 141KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.link
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fd4c4e4f593c8a6fa7016b239b9fd4c5

Headers

File Characteristics

Imports

advapi32

kernel32

ole32

oleaut32

\drake04\ft\fileio

\drake04\ft\daycount

\drake04\ft\layout

Exports

Exports

Sections

.text Size: 142KB - Virtual size: 141KB

.data Size: 4KB - Virtual size: 5KB

.link Size: 1KB - Virtual size: 1KB

.rloc Size: 5KB - Virtual size: 4KB

.text
Size: 142KB - Virtual size: 141KB

.data
Size: 4KB - Virtual size: 5KB

.link
Size: 1KB - Virtual size: 1KB

.rloc
Size: 5KB - Virtual size: 4KB