17f2cdf8c13b115c39bc555bf2785976_JaffaCakes118

General

Target

17f2cdf8c13b115c39bc555bf2785976_JaffaCakes118
Size

206KB
MD5

17f2cdf8c13b115c39bc555bf2785976
SHA1

d3c350bb089fba6c5079fb8d460d85b038a58643
SHA256

b2707f93c56419d1f5549f360862a348fc938f378af9d53f5f764f219b5e59fb
SHA512

5bac7d3ed78f63a18faa7d82842e8d0d083f9ed923a3755df9a24adfed8511bd7e9acddd92902a8058bce468de18656455495797ce8cdb92e6b9120b594f9f41
SSDEEP

6144:yI9/UdVGUHy8+6Bi3ICmJ3iG+235gyDlRd:yI9RUHy8zoJu30M5gyDln

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
17f2cdf8c13b115c39bc555bf2785976_JaffaCakes118

Files

17f2cdf8c13b115c39bc555bf2785976_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c0509b73f1c3026ea8e78f99e91ecb0e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

comdlg32

GetFileTitleA

rpcrt4

NdrClientCall
RpcBindingSetAuthInfoA
RpcStringBindingComposeA
RpcBindingFromStringBindingA
RpcStringFreeA

user32

ChildWindowFromPoint
RegisterClassW
RealGetWindowClass
UnhookWindowsHookEx
ToAscii
SetWindowsHookExW
DestroyIcon
DefWindowProcW
SetScrollRange
IsClipboardFormatAvailable
ClipCursor
EmptyClipboard
DrawEdge
WinHelpW
GetSysColorBrush
SetWindowPos
SetClipboardData
DestroyCursor
CallNextHookEx
GetSysColor

kernel32

SearchPathW
CreateFiber
FileTimeToSystemTime
FindResourceExA
GetFileTime
TerminateProcess
GetFileAttributesA
UnlockFile
SetEndOfFile
CompareStringW
IsDBCSLeadByte
EnumResourceNamesA
GetVersionExW
GetSystemTime
LockFile
FlushFileBuffers
GetVolumeInformationW
LocalAlloc
GetFileType
FileTimeToLocalFileTime
FlushFileBuffers
VerLanguageNameW
GetUserDefaultLangID
GetProfileStringW
GetSystemDirectoryW

Sections

.text
Size: 181KB - Virtual size: 181KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 220KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c0509b73f1c3026ea8e78f99e91ecb0e

Headers

File Characteristics

Imports

comdlg32

rpcrt4

user32

kernel32

Sections

.text Size: 181KB - Virtual size: 181KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 21KB - Virtual size: 20KB

.tls Size: 512B - Virtual size: 220KB

.text
Size: 181KB - Virtual size: 181KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 21KB - Virtual size: 20KB

.tls
Size: 512B - Virtual size: 220KB