4171b4219d5315bc7d51a7f062d5d6da_JaffaCakes118

General

Target

4171b4219d5315bc7d51a7f062d5d6da_JaffaCakes118
Size

55KB
MD5

4171b4219d5315bc7d51a7f062d5d6da
SHA1

0184a4a2d029142b93f5a8f0141fbc0f8bc58e57
SHA256

bcccf6ee669fcad31db189f1360240e5afdb811336469b195b5e3a0c8fbeec7c
SHA512

bb338b11ca0b438c23245d36bb0aaa38f1115c1de6961d72f7e8bfa0a57d8326afcf487e82ceccd492ec2f0a02bf06607dd6468ff5f9eb79f2d52af46b675e1a
SSDEEP

768:qSWvB/JDliZTzdg2fQD8OyydtCMxTFRjsRL7tcJ6CQZ7kOqLbxVUCts4Z6csWO:DQJDMZTOHtdYM3Rjsd7WP27pqbtsDcq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4171b4219d5315bc7d51a7f062d5d6da_JaffaCakes118

Files

4171b4219d5315bc7d51a7f062d5d6da_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2b7af642cedff7d0f59f81778b07baf9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetWindowPlacement
SetClipboardData
SetClassLongA
RegisterClassExA
LoadIconA
LoadCursorA
GetFocus
GetDlgItem
BeginDeferWindowPos

kernel32

lstrcpynA
lstrcmpiA
SizeofResource
SetLastError
RtlUnwind
MultiByteToWideChar
HeapReAlloc
HeapDestroy
HeapCreate
CloseHandle
ExitProcess
GetCommandLineA
GetConsoleOutputCP
GetCurrentProcessId
GetModuleHandleA
GetStartupInfoA
GetVersionExA
GlobalLock
HeapAlloc

setupapi

SetupScanFileQueueA
SetupDiSetDeviceInstallParamsA
SetupDiGetClassImageListExA
SetupCreateDiskSpaceListA

olepro32

OleIconToCursor
OleTranslateColor

oleacc

GetOleaccVersionInfo
AccessibleObjectFromPoint
AccessibleObjectFromEvent
CreateStdAccessibleProxyW
GetRoleTextW
GetRoleTextA

advapi32

ElfNumberOfRecords
LsaGetRemoteUserName
QueryServiceConfig2W
RemoveTraceCallback
SetPrivateObjectSecurityEx
CryptDecrypt

security

InitSecurityInterfaceA
ExportSecurityContext
AddSecurityPackageA

Sections

.text
Size: 43KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2b7af642cedff7d0f59f81778b07baf9

Headers

File Characteristics

Imports

user32

kernel32

setupapi

olepro32

oleacc

advapi32

security

Sections

.text Size: 43KB - Virtual size: 44KB

.data Size: 9KB - Virtual size: 12KB

.rsrc Size: 1024B - Virtual size: 4KB

.reloc Size: 1024B - Virtual size: 4KB

.text
Size: 43KB - Virtual size: 44KB

.data
Size: 9KB - Virtual size: 12KB

.rsrc
Size: 1024B - Virtual size: 4KB

.reloc
Size: 1024B - Virtual size: 4KB