0f52a5529eef4cac0975a920df5a2d07_JaffaCakes118

General

Target

0f52a5529eef4cac0975a920df5a2d07_JaffaCakes118
Size

52KB
MD5

0f52a5529eef4cac0975a920df5a2d07
SHA1

92484b3bc51337eb85cf328941c18cb16addbaec
SHA256

53804edfbba92d54a3f5fef4728d79817079121813928b4354b31e02c585362e
SHA512

f49d64aece1d0b8875a03295a8eb5396062d339f049a732476ca51ef5d88febbd5755c094805d334dd536d689195333a9625c3adf9e00cd8cbe995dfea8703e4
SSDEEP

384:LM3vYkbASpZak+QdawhoZK5cs7jF7RwmRRfDdVZ+Gt46NZu4BOEHH66ElBc8/led:LxkUEa5QdaEhJF7R1JOGt46DuZ7x8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0f52a5529eef4cac0975a920df5a2d07_JaffaCakes118

Files

0f52a5529eef4cac0975a920df5a2d07_JaffaCakes118
.exe windows:5 windows x86 arch:x86

110a8c4aaca8a0501588a573aabe89fa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LocalAlloc
AddAtomA
CloseHandle
CompareStringA
CreateEventA
CreateProcessA
FormatMessageW
FreeLibrary
GetComputerNameA
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetProcAddress
GetStartupInfoA
GetSystemDirectoryA
GetSystemTimeAsFileTime
GetTickCount
WriteFile
GetVersionExA
InterlockedDecrement
InterlockedIncrement
LoadLibraryExA
MultiByteToWideChar
OpenEventA
OpenProcess
QueryPerformanceCounter
SetConsoleCtrlHandler
SetCurrentDirectoryA
SetEvent
SetUnhandledExceptionFilter
Sleep
TerminateProcess
UnhandledExceptionFilter
WideCharToMultiByte
lstrcatA
lstrcmpW
lstrcpyA
lstrcpynA
lstrlenA
CreateFileA
GetCurrentThread
GetUserDefaultLangID
VirtualAlloc

user32

LoadCursorW
LoadCursorA
ShowWindow

gdi32

GetStockObject

advapi32

RegOpenKeyExW

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data2
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

.text2
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19KB - Virtual size: 1003KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

110a8c4aaca8a0501588a573aabe89fa

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

Sections

.text Size: 5KB - Virtual size: 4KB

.data2 Size: 512B - Virtual size: 100B

.text2 Size: 23KB - Virtual size: 23KB

.data Size: 3KB - Virtual size: 2KB

.rsrc Size: 19KB - Virtual size: 1003KB

.text
Size: 5KB - Virtual size: 4KB

.data2
Size: 512B - Virtual size: 100B

.text2
Size: 23KB - Virtual size: 23KB

.data
Size: 3KB - Virtual size: 2KB

.rsrc
Size: 19KB - Virtual size: 1003KB