f202d2e4278ac5144051f219f703d66d_JaffaCakes118

General

Target

f202d2e4278ac5144051f219f703d66d_JaffaCakes118
Size

181KB
MD5

f202d2e4278ac5144051f219f703d66d
SHA1

53a3869d925f9e98eb9afc0962791a67fdce1596
SHA256

d672f3e4263ec8b715641a76958407a73bb15401e8f93b7d41372b8946b12b8c
SHA512

b2c16312bab6204115fa38491670469516b39e0ddeec004da4cb2ca24f4231739d2bc7848fdfd055af40893a65481db2009c6196287a47d71170765333ceae11
SSDEEP

3072:DIAIbOci8DKZH1oWMVBSYs3nO04OymqBQqk6C+RT+ciJnwPAaZZaOpc1CKNFZ:DIAIbji5VoRXSH3nAQqjRTmsXZZaNCuZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f202d2e4278ac5144051f219f703d66d_JaffaCakes118

Files

f202d2e4278ac5144051f219f703d66d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

06a42d3d64ef82afef6fb41e41624086

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

rpcrt4

RpcStringBindingComposeA
RpcBindingFromStringBindingA
RpcBindingSetAuthInfoA
NdrClientCall
RpcStringFreeA

comdlg32

GetFileTitleA

kernel32

CreateFiber
GetVolumeInformationW
FlushFileBuffers
UnlockFile
CompareStringW
LocalAlloc
FileTimeToLocalFileTime
TerminateProcess
SetEndOfFile
LockFile
GetProfileStringW
EnumResourceNamesA
GetVersionExW
GetFileTime
SearchPathW
FlushFileBuffers
GetFileType
GetUserDefaultLangID
FileTimeToSystemTime
FindResourceExA
GetSystemTime
VerLanguageNameW
GetFileAttributesA
IsDBCSLeadByte
GetSystemDirectoryW

user32

DrawEdge
CallNextHookEx
WinHelpW
SetClipboardData
SetWindowPos
RealGetWindowClass
SetWindowsHookExW
UnhookWindowsHookEx
DefWindowProcW
RegisterClassW
ClipCursor
EmptyClipboard
SetScrollRange
IsClipboardFormatAvailable
ToAscii
GetSysColorBrush
ChildWindowFromPoint
DestroyCursor
DestroyIcon
GetSysColor

comctl32

ImageList_Add
ImageList_GetIconSize
ImageList_DrawEx
ImageList_Create
ImageList_Destroy

Sections

.text
Size: 159KB - Virtual size: 159KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

06a42d3d64ef82afef6fb41e41624086

Headers

File Characteristics

Imports

rpcrt4

comdlg32

kernel32

user32

comctl32

Sections

.text Size: 159KB - Virtual size: 159KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 18KB - Virtual size: 17KB

.tls Size: 512B - Virtual size: 76KB

.text
Size: 159KB - Virtual size: 159KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 18KB - Virtual size: 17KB

.tls
Size: 512B - Virtual size: 76KB