4cc6fba033bac2c8762a72ae6ca08f7f_JaffaCakes118

General

Target

4cc6fba033bac2c8762a72ae6ca08f7f_JaffaCakes118
Size

220KB
MD5

4cc6fba033bac2c8762a72ae6ca08f7f
SHA1

cee98c717df9f31a63511405fac60fefdb31b4e5
SHA256

8c11fc1d125ca036686141b552c3c8b977e17b3ce0f828e9de94db9406873848
SHA512

5c0503fa6cc1cb143dfd914803b437491a80336784f7bdc953fc612ad6c860b758e5be3d6d35f700edbad965bb4cb746ef13bd27a1d21f21fc82ce0c8b495169
SSDEEP

3072:KdoCyyrXcOllv/VZfk9picQwdd6y2c1r0xIhcxcLwg+8QfTqedzAiq+hQyQHxsgZ:5C7rM6l8pX7dpF1gxPxU+8RedJHQvHy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4cc6fba033bac2c8762a72ae6ca08f7f_JaffaCakes118

Files

4cc6fba033bac2c8762a72ae6ca08f7f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

66a7cae27b5669e40cba563055b82247

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

setupapi

CMP_WaitNoPendingInstallEvents
SetupDiGetDeviceRegistryPropertyW
CM_Get_DevNode_Status

kernel32

FreeLibrary
ReleaseSemaphore
LocalAlloc
InterlockedCompareExchange
UnhandledExceptionFilter
CreateFiberEx
GetStartupInfoA
WaitForSingleObject
Sleep
TerminateThread
GetProcessHeap
QueryPerformanceCounter
TlsAlloc
GetCurrentProcess
DeleteFileW
FoldStringW
TlsFree
EnumResourceNamesA
GetCurrentProcessId
VirtualProtect
InterlockedExchange
GetTickCount
CloseHandle
LoadLibraryW
CreateSemaphoreW
TlsGetValue
FlushFileBuffers
LoadLibraryA
GetCurrentThreadId
GetSystemTimeAsFileTime
GetLastError
RaiseException
TerminateProcess
GetLocaleInfoW
GetModuleHandleW
GetCommandLineW
IsDebuggerPresent
SetUnhandledExceptionFilter
GetProcAddress
GetModuleFileNameW

msimg32

AlphaBlend

user32

LoadIconW
GetParent
SetWindowPos
IsIconic
ShowWindow
UpdateWindow
IsWindow
RealGetWindowClass
LoadImageW
SetWindowPlacement
GetSystemMetrics
DestroyWindow
MapVirtualKeyW
GetWindowPlacement
IsZoomed
SetForegroundWindow

Sections

.text
Size: 189KB - Virtual size: 188KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 192KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

66a7cae27b5669e40cba563055b82247

Headers

File Characteristics

Imports

setupapi

kernel32

msimg32

user32

Sections

.text Size: 189KB - Virtual size: 188KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 27KB - Virtual size: 27KB

.tls Size: 512B - Virtual size: 192KB

.text
Size: 189KB - Virtual size: 188KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 27KB - Virtual size: 27KB

.tls
Size: 512B - Virtual size: 192KB