e8b3747e27c2a5301ab052b00cb7481d_JaffaCakes118

General

Target

e8b3747e27c2a5301ab052b00cb7481d_JaffaCakes118
Size

181KB
MD5

e8b3747e27c2a5301ab052b00cb7481d
SHA1

a2eb7df8211fba3780f9b1373309ad61ee47de3f
SHA256

e8cda5bb3bf4a7c8d6c2cd7d15a4e73e8efe68b8df2bc0146a7540c59e489375
SHA512

d0f1118d81497a93a014d4b6f1904e605fdca0ca5615a66a830eb194a4228c75cc985d864fe395b168c15016f3fe16262d7605a5a61072a5774b82c242c4f32f
SSDEEP

3072:1lpe9xEv8NNV2yYaIXvGhXkykB9SgluCRXSAVWn+fTtYKh0RCA9qUGRQtnk:1zcxEu+yYaIXhyknSgluCRCBn+fTnCR4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e8b3747e27c2a5301ab052b00cb7481d_JaffaCakes118

Files

e8b3747e27c2a5301ab052b00cb7481d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

585b0918bf2f460b96f74be8014d21fa

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetUserDefaultLangID
CreateFiber
SearchPathW
LocalAlloc
GetProfileStringW
GetFileType
IsDBCSLeadByte
GetSystemTime
TerminateProcess
FindResourceExA
SetEndOfFile
GetVolumeInformationW
EnumResourceNamesA
FileTimeToLocalFileTime
LockFile
FlushFileBuffers
UnlockFile
GetFileAttributesA
GetVersionExW
FlushFileBuffers
GetFileTime
CompareStringW
VerLanguageNameW
FileTimeToSystemTime
GetSystemDirectoryW

rpcrt4

NdrClientCall
RpcBindingFromStringBindingA
RpcStringBindingComposeA
RpcBindingSetAuthInfoA
RpcStringFreeA

comdlg32

GetFileTitleA

user32

ChildWindowFromPoint
DefWindowProcW
ClipCursor
SetScrollRange
RealGetWindowClass
RegisterClassW
DestroyIcon
GetSysColorBrush
SetWindowsHookExW
DrawEdge
ToAscii
UnhookWindowsHookEx
EmptyClipboard
IsClipboardFormatAvailable
SetWindowPos
CallNextHookEx
WinHelpW
SetClipboardData
DestroyCursor
GetSysColor

comctl32

ImageList_DrawEx
ImageList_Create
ImageList_GetIconSize
ImageList_Add
ImageList_Destroy

Sections

.text
Size: 161KB - Virtual size: 160KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

585b0918bf2f460b96f74be8014d21fa

Headers

File Characteristics

Imports

kernel32

rpcrt4

comdlg32

user32

comctl32

Sections

.text Size: 161KB - Virtual size: 160KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 17KB - Virtual size: 16KB

.tls Size: 512B - Virtual size: 72KB

.text
Size: 161KB - Virtual size: 160KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 17KB - Virtual size: 16KB

.tls
Size: 512B - Virtual size: 72KB