261d916b3ebe4338510557d5ba9d51d6_JaffaCakes118

General

Target

261d916b3ebe4338510557d5ba9d51d6_JaffaCakes118
Size

198KB
MD5

261d916b3ebe4338510557d5ba9d51d6
SHA1

1debec166c0406ba530f41dd4c6d66ce206212e3
SHA256

ed06d7a1f6940358ee302070e205e18e464aa270c8200207cbf6918e244f7fe7
SHA512

3e4419e88e2783c3faa5f59c449468539b08edc17396f96e7df1a5bb5b6daa049a4244d1c6dfdce72a8ec555f82fc2b4c97ee28ed8b3fd7ec1e756d021ab0c52
SSDEEP

6144:oDoE/rSz3ZtZFplswPDEZ2eXFanKwqrJ:UIptZFRAZxXcnKwqN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
261d916b3ebe4338510557d5ba9d51d6_JaffaCakes118

Files

261d916b3ebe4338510557d5ba9d51d6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c916a6fe361b26eb042dadc2a2895b95

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

oleacc

LresultFromObject
CreateStdAccessibleObject

ole32

CoRevokeClassObject
CoUninitialize
CoCreateInstance
CoRegisterClassObject
CoInitialize
CoTaskMemAlloc
StringFromGUID2
CoTaskMemFree
CoTaskMemRealloc
StringFromCLSID

kernel32

CreateFileMappingW
lstrcmpiW
FillConsoleOutputCharacterA
OutputDebugStringW
LockResource
GetProcessWorkingSetSize
lstrcpyA
FindClose
GetCPInfo
GetTickCount
MultiByteToWideChar
GetACP
lstrlenW
EnumResourceNamesA
GetLastError
lstrcpyW
FreeEnvironmentStringsW
GlobalAlloc
GlobalFree
InitializeCriticalSection
WideCharToMultiByte
GetModuleHandleW

advapi32

RegCloseKey
RegDeleteKeyW
RegDeleteValueW
RegEnumKeyExW
RegQueryInfoKeyW
RegOpenKeyExW
RegCreateKeyExW
RegSetValueExW

user32

KillTimer
GetMessageW
UpdateWindow
CharNextW
DispatchMessageW
PostThreadMessageW
SetTimer
wsprintfW
GetDC
CharUpperW
TranslateMessage
UnregisterClassA

gdi32

SelectObject
GetTextMetricsW
DeleteObject
GetOutlineTextMetricsW
CreateFontIndirectW
AddFontResourceExW

psapi

GetProcessMemoryInfo

shlwapi

PathCombineW
PathFileExistsW

Sections

.text
Size: 124KB - Virtual size: 124KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 69KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.isete
Size: 1024B - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c916a6fe361b26eb042dadc2a2895b95

Headers

File Characteristics

Imports

oleacc

ole32

kernel32

advapi32

user32

gdi32

psapi

shlwapi

Sections

.text Size: 124KB - Virtual size: 124KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 69KB - Virtual size: 69KB

.isete Size: 1024B - Virtual size: 84KB

.text
Size: 124KB - Virtual size: 124KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 69KB - Virtual size: 69KB

.isete
Size: 1024B - Virtual size: 84KB