2caba531fbae385e32f43dab4a1d4320_JaffaCakes118

General

Target

2caba531fbae385e32f43dab4a1d4320_JaffaCakes118
Size

138KB
MD5

2caba531fbae385e32f43dab4a1d4320
SHA1

94101e2336b94c757d735b9a0d0346c7dd297f6b
SHA256

7e43112eeea37c8e174c4dfe03cc1601738d355704dcb1d14dbc5fb26cbb5c74
SHA512

dbbe4b86f106901f44a037fb6929c53e649ac84dc3ca68fc156da1e2a42139f04cb465c4f9710eadef9d5aae8c6c545e1f9eb6534a0880ec6d33cf7153d7915f
SSDEEP

3072:H+9pzg2+/4mbRIy5GOrI+vQNWhqUDtxPL2yxNZjFt+fs8Tim1whO24:eDgrbT5Gyo0qStlLjhH+Ub1L4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2caba531fbae385e32f43dab4a1d4320_JaffaCakes118

Files

2caba531fbae385e32f43dab4a1d4320_JaffaCakes118
.exe windows:5 windows x86 arch:x86

2270e57b373b736d294660eb053f87c1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

version

GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW

ole32

CoTaskMemFree
OleUninitialize
OleInitialize

oleaut32

VariantClear

ntdll

NtAllocateVirtualMemory
RtlAddAccessAllowedAceEx
RtlAdjustPrivilege

advapi32

RegEnumValueW
RegSetValueW
RegDeleteKeyW
RegUnLoadKeyW
EqualSid
RegQueryValueExW
RegOpenKeyExW
FreeSid
GetTokenInformation
RegOpenKeyExA
RegCloseKey
RegEnumKeyW
RegCreateKeyExW
OpenProcessToken
RegSaveKeyW
AdjustTokenPrivileges
RegFlushKey
LookupPrivilegeValueW
RegQueryValueExA
RegSetValueExW
RegLoadKeyW
RegDeleteValueW
RegQueryInfoKeyW
AllocateAndInitializeSid

kernel32

GetACP
GetStartupInfoA

rpcrt4

RpcStringFreeW

gdi32

CreateFontIndirectW
DeleteObject
GetStockObject
GetDeviceCaps
GetObjectW

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 101KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 232KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 28KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

2270e57b373b736d294660eb053f87c1

Headers

DLL Characteristics

File Characteristics

Imports

version

ole32

oleaut32

ntdll

advapi32

kernel32

rpcrt4

gdi32

Sections

.text Size: 6KB - Virtual size: 6KB

.rsrc Size: 101KB - Virtual size: 100KB

.data Size: 1KB - Virtual size: 232KB

.rdata Size: 28KB - Virtual size: 30KB

.text
Size: 6KB - Virtual size: 6KB

.rsrc
Size: 101KB - Virtual size: 100KB

.data
Size: 1KB - Virtual size: 232KB

.rdata
Size: 28KB - Virtual size: 30KB