1341643e5f4435c7e805d04a52529143_JaffaCakes118

General

Target

1341643e5f4435c7e805d04a52529143_JaffaCakes118
Size

979KB
MD5

1341643e5f4435c7e805d04a52529143
SHA1

e36760d4cf22e6cb5b32fe24a03c7dfc818791b5
SHA256

e410c5306300ddd23d7c96736ad6f3392cd0a17f74fc658289225a6ff0bad1f9
SHA512

ae682eb2dd5e3a7ddb6052843e03bc450985e6bdf8c59a22b73623b624beee7799ea1a3d854c59e73467768c481ae5b8d0552de66443512b5892fa620dc8e68e
SSDEEP

24576:6k/ODVPMBpFVgSOopHzf+CmDPnUHUIAD6eHpijS:vO5PKySOoRGCXHUIRapeS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1341643e5f4435c7e805d04a52529143_JaffaCakes118

Files

1341643e5f4435c7e805d04a52529143_JaffaCakes118
.exe windows:5 windows x86 arch:x86

a103d404767bd09c2a8131ab5881ab2a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

InitCommonControlsEx
PropertySheetW

setupapi

SetupDiDestroyDeviceInfoList
SetupDiGetClassDevsW
SetupDiGetDeviceInterfaceDetailW
SetupDiGetDeviceInstanceIdW
SetupDiOpenDeviceInterfaceW

ole32

StringFromGUID2
CoUninitialize
CoCreateInstance
CoInitializeSecurity
CoGetObject
CoInitializeEx
CoSetProxyBlanket

tapi32

lineUncompleteCall
lineAccept

oleacc

LresultFromObject
CreateStdAccessibleObject

kernel32

CloseHandle
MulDiv
HeapFree
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcessId
GetLastError
Sleep
InterlockedExchange
CreateMutexW
GetCurrentProcess
IsWow64Process
GetCurrentThreadId
GetProcessHeap
SetUnhandledExceptionFilter
LocalFree
QueryPerformanceCounter
GetStartupInfoW
VerSetConditionMask
InterlockedCompareExchange
VerifyVersionInfoW
UnhandledExceptionFilter
GetTickCount
GetModuleHandleA
HeapAlloc

Sections

.text
Size: 677KB - Virtual size: 677KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 276KB - Virtual size: 3.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a103d404767bd09c2a8131ab5881ab2a

Headers

File Characteristics

Imports

comctl32

setupapi

ole32

tapi32

oleacc

kernel32

Sections

.text Size: 677KB - Virtual size: 677KB

.rdata Size: 1KB - Virtual size: 1KB

.data Size: 276KB - Virtual size: 3.5MB

.rsrc Size: 23KB - Virtual size: 22KB

.text
Size: 677KB - Virtual size: 677KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 276KB - Virtual size: 3.5MB

.rsrc
Size: 23KB - Virtual size: 22KB