563bec542b27a3f782b8ae8673dec340_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

563bec542b27a3f782b8ae8673dec340_JaffaCakes118
Size

186KB
MD5

563bec542b27a3f782b8ae8673dec340
SHA1

c019391605a4a0622a9ff0861dc761d76767c306
SHA256

62235b38b4131042010a9e8017f2f087eb1f22db3c68c32bdcbe3da2619c8aff
SHA512

d95ecf027a6cb391d95a2b65fd9d0e8b3114a0eab8251667cfde51b7ec8ba53ca6e343acda15313aaf5cf8bd8931872721dfb123ad833a57a23d4138cb1799c0
SSDEEP

3072:+tQwvJXnLxeM3b6kwmewyBlMOgPMlSRwzz5URxNASWW:GJXLxeMLTaLgdwzzSHOf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
563bec542b27a3f782b8ae8673dec340_JaffaCakes118

Files

563bec542b27a3f782b8ae8673dec340_JaffaCakes118
.dll windows:1 windows x86 arch:x86

69281bc6dc27e73d0b6918e5c4be3108

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
CreateFileA
ExitProcess
FindClose
FindFirstFileA
FindNextFileA
GetCommandLineA
GetFileAttributesA
GetFileSize
GetFileType
GetLastError
GetModuleHandleA
GetProcAddress
GetStartupInfoA
GetStringTypeA
GetVersionExA
GetVolumeInformationA
GlobalAlloc
GlobalFree
GlobalReAlloc
LoadLibraryA
MultiByteToWideChar
OutputDebugStringA
ReadFile
SetEndOfFile
SetErrorMode
SetFilePointer
SetLastError
Sleep
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
WideCharToMultiByte
WriteFile

ole32

CLSIDFromProgID
CoCreateInstance
CoInitialize
CoUninitialize
ProgIDFromCLSID

oleaut32

GetActiveObject
SafeArrayCreate
SysAllocStringByteLen
SysFreeString
SysStringByteLen
VariantClear
VariantCopy

user32

CharLowerBuffA
CharNextA
CharUpperBuffA
MessageBoxA

\drake10\ft\layout

LAYOUT
FULLSTATE
OVRSTR
OVRNUM
CLEANSTRING

\drake10\ft\daycount

ADJMONTH
FINDMONDAY

\drake10\ft\fileio

SETSTATEREFERENCE

\drake10\ft\per_ef

FDST_EF

\drake10\ft\fdst_wks

FDST_WKS

Exports

Exports

MSIES

Sections

.text
Size: 166KB - Virtual size: 165KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.link
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rloc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

69281bc6dc27e73d0b6918e5c4be3108

Headers

File Characteristics

Imports

kernel32

ole32

oleaut32

user32

\drake10\ft\layout

\drake10\ft\daycount

\drake10\ft\fileio

\drake10\ft\per_ef

\drake10\ft\fdst_wks

Exports

Exports

Sections

.text Size: 166KB - Virtual size: 165KB

.data Size: 10KB - Virtual size: 13KB

.link Size: 2KB - Virtual size: 1KB

.rloc Size: 7KB - Virtual size: 7KB

.text
Size: 166KB - Virtual size: 165KB

.data
Size: 10KB - Virtual size: 13KB

.link
Size: 2KB - Virtual size: 1KB

.rloc
Size: 7KB - Virtual size: 7KB