4056aa2a01dc33560d23a086d95397d2_JaffaCakes118

General

Target

4056aa2a01dc33560d23a086d95397d2_JaffaCakes118
Size

149KB
MD5

4056aa2a01dc33560d23a086d95397d2
SHA1

0c3da1f48a8ee1becf9cbb94420f041dd54fec6d
SHA256

bca660325866ce507685b843adb41e93c7033f25bcbed5e73f20885d1952be86
SHA512

02eead494e660d6d8677d02ea2deebd1630da60ad36a5159016bf3dfeb19c06a4849e8e46494606d505f30489fff7955a9fd1b807a2d6a4315dd55969dcc4d1d
SSDEEP

3072:HoG/2KZJkv0Ro7vmjy66Q/FKgxxWvsXRksNshl0C9DMf0QlBWn1yZGTRN:IiZJkj78kg/WHoshl0GDM7lBg1y

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4056aa2a01dc33560d23a086d95397d2_JaffaCakes118

Files

4056aa2a01dc33560d23a086d95397d2_JaffaCakes118
.exe windows:5 windows x86 arch:x86

bfa8f9368b9dd229e11ae815cf31b5d2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegSetValueW
RegSaveKeyW
RegQueryValueExW
RegQueryValueExA
AllocateAndInitializeSid
RegEnumKeyW
RegQueryInfoKeyW
GetTokenInformation
RegDeleteValueW
EqualSid
RegUnLoadKeyW
RegCloseKey
RegDeleteKeyW
FreeSid
AdjustTokenPrivileges
RegOpenKeyExA
RegEnumValueW
RegSetValueExW
OpenProcessToken
RegOpenKeyExW
RegCreateKeyExW
LookupPrivilegeValueW
RegFlushKey
RegLoadKeyW

rpcrt4

RpcStringFreeW

kernel32

GetStartupInfoA

gdi32

GetStockObject
CreateFontIndirectW
DeleteObject
GetDeviceCaps
GetObjectW

ntdll

NtAllocateVirtualMemory
RtlAdjustPrivilege

ole32

OleInitialize
OleUninitialize
CoTaskMemFree

oleaut32

VariantClear

version

GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW

Sections

.text
Size: 132KB - Virtual size: 132KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 352KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

bfa8f9368b9dd229e11ae815cf31b5d2

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

rpcrt4

kernel32

gdi32

ntdll

ole32

oleaut32

version

Sections

.text Size: 132KB - Virtual size: 132KB

.rsrc Size: 6KB - Virtual size: 5KB

.data Size: 7KB - Virtual size: 352KB

.reloc Size: 512B - Virtual size: 24B

.rdata Size: 2KB - Virtual size: 1KB

.text
Size: 132KB - Virtual size: 132KB

.rsrc
Size: 6KB - Virtual size: 5KB

.data
Size: 7KB - Virtual size: 352KB

.reloc
Size: 512B - Virtual size: 24B

.rdata
Size: 2KB - Virtual size: 1KB