2584071ac3f4decdd5521cf04fb4e61c_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

2584071ac3f4decdd5521cf04fb4e61c_JaffaCakes118
Size

1.1MB
MD5

2584071ac3f4decdd5521cf04fb4e61c
SHA1

025377bd90f7354319126c5100c73d6317f154a4
SHA256

43910f1fb37925fb655ba8b391aa8781b31d33081cf55f582c75f99d5558f506
SHA512

8b2b72301f3aadbf25c1ddbccde43b9527a1396f2ad4a2859a968cf9f1b00fec941bab9be5b2f84279c25f45b0e7a9f1152d403326140a8a2e32ce73fc59a705
SSDEEP

24576:5/YkBHVvCojMG9KxZojBTfTpYAl9ku2SA+YW7JpgDq9JFaoOxxKYtbk2085w:xYkXj2AvpYAK9W7JCO9JULxnbkww

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2584071ac3f4decdd5521cf04fb4e61c_JaffaCakes118

Files

2584071ac3f4decdd5521cf04fb4e61c_JaffaCakes118
.exe windows:5 windows x86 arch:x86

0438f6d8bf0c7a967663ac21a03dfbc4

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

LocalFileTimeToFileTime
Process32FirstW
VirtualUnlock
GetUserDefaultLCID
GetTimeFormatA
lstrcpyA
GlobalFree
_lcreat
GetCommState
GetDateFormatA
UnlockFile
SetThreadContext
ConvertDefaultLocale
ClearCommError
VirtualAlloc

gdi32

CLIPOBJ_ppoGetPath
ExtFloodFill
GdiEndDocEMF
Rectangle
CreateRectRgn
AddFontResourceExW
SelectClipRgn
Escape
AnyLinkedFonts
GetObjectType
GetDeviceCaps
GdiEndPageEMF

userenv

FreeGPOListW
RegisterGPNotification
RsopResetPolicySettingStatus
GetAppliedGPOListW
GetUserProfileDirectoryA
GetUserProfileDirectoryW
RefreshPolicy
EnterCriticalPolicySection
GetDefaultUserProfileDirectoryW
CreateEnvironmentBlock
UnloadUserProfile

oleaut32

VariantChangeTypeEx
VariantCopyInd
SysAllocStringLen
SysReAllocStringLen
SafeArrayPtrOfIndex
SafeArrayCreate
SafeArrayGetLBound
VariantCopy
GetActiveObject
GetErrorInfo

Sections

CODE
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

CODE
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 107KB - Virtual size: 172KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 225KB - Virtual size: 264KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

TLSCBA
Size: 101KB - Virtual size: 206KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.INIT
Size: 139KB - Virtual size: 195KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 310KB - Virtual size: 435KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 217KB - Virtual size: 306KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 90B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0438f6d8bf0c7a967663ac21a03dfbc4

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

gdi32

userenv

oleaut32

Sections

CODE Size: 14KB - Virtual size: 13KB

CODE Size: 10KB - Virtual size: 9KB

DATA Size: 107KB - Virtual size: 172KB

DATA Size: 225KB - Virtual size: 264KB

TLSCBA Size: 101KB - Virtual size: 206KB

.INIT Size: 139KB - Virtual size: 195KB

.idata Size: 310KB - Virtual size: 435KB

.edata Size: 217KB - Virtual size: 306KB

.rsrc Size: 9KB - Virtual size: 9KB

.reloc Size: 512B - Virtual size: 90B

CODE
Size: 14KB - Virtual size: 13KB

CODE
Size: 10KB - Virtual size: 9KB

DATA
Size: 107KB - Virtual size: 172KB

DATA
Size: 225KB - Virtual size: 264KB

TLSCBA
Size: 101KB - Virtual size: 206KB

.INIT
Size: 139KB - Virtual size: 195KB

.idata
Size: 310KB - Virtual size: 435KB

.edata
Size: 217KB - Virtual size: 306KB

.rsrc
Size: 9KB - Virtual size: 9KB

.reloc
Size: 512B - Virtual size: 90B