2e605464d990d696b15217c49401b9b0_JaffaCakes118

General

Target

2e605464d990d696b15217c49401b9b0_JaffaCakes118
Size

133KB
MD5

2e605464d990d696b15217c49401b9b0
SHA1

be2dd529bfd8c34f2fa06be610a83e09a71aa1cc
SHA256

a6e6c61368cad8da4b7d5e020357acce203e8f6f4ea9d78d9d89f85eebb59a7e
SHA512

2892e8486f65d108d165ec016ba3634ebfda623ac781ac503b9d8da69a43af9ba741882de11a9ff6ca7234420550df0b0a238a8b8dbbf298813ff1bf7d1f3be0
SSDEEP

1536:AlqAWkpLcsAHM06OxPUztyy3tpAfvhtI8P12Y/hvgLYOUeveQ8AE8N:A1pLcsc6Od+d3tp+vrgjDUUiF8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2e605464d990d696b15217c49401b9b0_JaffaCakes118

Files

2e605464d990d696b15217c49401b9b0_JaffaCakes118
.dll windows:1 windows x86 arch:x86

3333f504598b836ed5348f3940d6f099

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
CreateFileA
ExitProcess
FindClose
FindFirstFileA
FindNextFileA
GetCommandLineA
GetFileAttributesA
GetFileSize
GetFileType
GetLastError
GetModuleHandleA
GetProcAddress
GetStartupInfoA
GetStringTypeA
GetVersionExA
GetVolumeInformationA
GlobalAlloc
GlobalFree
LoadLibraryA
MultiByteToWideChar
OutputDebugStringA
ReadFile
SetEndOfFile
SetErrorMode
SetFilePointer
SetLastError
Sleep
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
WideCharToMultiByte
WriteFile

ole32

CLSIDFromProgID
CoCreateInstance
CoInitialize
CoUninitialize
ProgIDFromCLSID

oleaut32

GetActiveObject
SafeArrayCreate
SysAllocStringByteLen
SysFreeString
SysStringByteLen
VariantClear
VariantCopy

user32

CharLowerBuffA
CharNextA
CharUpperBuffA
MessageBoxA

\drake10\ft\layout

LAYOUT
CSZ

Exports

Exports

PER039
READ2441
READ8889
READ8915
READMSA
READROTH

Sections

.text
Size: 123KB - Virtual size: 123KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.link
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3333f504598b836ed5348f3940d6f099

Headers

File Characteristics

Imports

kernel32

ole32

oleaut32

user32

\drake10\ft\layout

Exports

Exports

Sections

.text Size: 123KB - Virtual size: 123KB

.data Size: 3KB - Virtual size: 5KB

.link Size: 2KB - Virtual size: 1KB

.rloc Size: 3KB - Virtual size: 2KB

.text
Size: 123KB - Virtual size: 123KB

.data
Size: 3KB - Virtual size: 5KB

.link
Size: 2KB - Virtual size: 1KB

.rloc
Size: 3KB - Virtual size: 2KB