31cc947a5c59f01ead3481014ec57d9d_JaffaCakes118

General

Target

31cc947a5c59f01ead3481014ec57d9d_JaffaCakes118
Size

173KB
MD5

31cc947a5c59f01ead3481014ec57d9d
SHA1

4d57064e3e53401cdc8ee4620c459c81ea9a020b
SHA256

434776e16046a71f6a2c0e2f9636ce29bf85b2c55b6aad885e36ef4e1da3b05a
SHA512

c4cc9d923e5f825476608bf94c3f8d18748e20dc03126ee3429bdc3da04267eb82370d252467061cbdf49f5073545c682fa05e81e51feaf66eeebe853610b77a
SSDEEP

3072:v1vzvpsdyPmiDyP5wS6sD4TSAty8D8OEULtktm/DlH2X8qRpL5DEBNh6VLVRQMx:HmiDyV6sDzAtXgOEUL+tcu3JEBNkVLn7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
31cc947a5c59f01ead3481014ec57d9d_JaffaCakes118

Files

31cc947a5c59f01ead3481014ec57d9d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7468a9cb1bf15f1cbc1d6684188883a1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

CreateFontIndirectA

setupapi

CM_Get_Depth
SetupDiGetDeviceRegistryPropertyW
CMP_WaitNoPendingInstallEvents
CM_Get_DevNode_Status

comdlg32

ChooseFontA
GetOpenFileNameA

shell32

Shell_NotifyIconA

ole32

CLSIDFromString
CoCreateInstance
CoTaskMemFree
StgCreateDocfile

shlwapi

PathAddBackslashA

advapi32

RegCloseKey
RegDeleteKeyA
RegEnumValueA
RegOpenKeyExA
RegCreateKeyA
RegSetValueExA
RegEnumKeyExA
RegCreateKeyExA
RegQueryInfoKeyA
RegQueryValueExA

kernel32

LeaveCriticalSection
IsBadCodePtr
LoadLibraryExA
AddAtomA
GetCurrentProcessId
GetStringTypeA
DeleteCriticalSection
HeapAlloc
GetCurrentProcess
LCMapStringA
InterlockedIncrement
GetLastError
LCMapStringW
SetStdHandle
SetFilePointer
CloseHandle
EnumResourceNamesA
IsDBCSLeadByteEx
FlushFileBuffers
IsBadReadPtr
GetModuleHandleA
RaiseException
InterlockedDecrement
EnterCriticalSection
InitializeCriticalSection
GetSystemTimeAsFileTime
GetStringTypeW
FlushInstructionCache
GetCurrentThreadId
SizeofResource

Sections

.text
Size: 94KB - Virtual size: 94KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 74KB - Virtual size: 74KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7468a9cb1bf15f1cbc1d6684188883a1

Headers

File Characteristics

Imports

gdi32

setupapi

comdlg32

shell32

ole32

shlwapi

advapi32

kernel32

Sections

.text Size: 94KB - Virtual size: 94KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 74KB - Virtual size: 74KB

.reloc Size: 1024B - Virtual size: 116KB

.text
Size: 94KB - Virtual size: 94KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 74KB - Virtual size: 74KB

.reloc
Size: 1024B - Virtual size: 116KB