59ef8908db1df1f144becadf40c68622_JaffaCakes118

General

Target

59ef8908db1df1f144becadf40c68622_JaffaCakes118
Size

207KB
MD5

59ef8908db1df1f144becadf40c68622
SHA1

1876ae57c54233bb1bdac1cb84d72d9211b8d53a
SHA256

6697ade7ea453c6e2dfd85b3cac72d03278366c3c425a65edc170edde4727d83
SHA512

c7e2ac1275996237993baea710433f50a6ba41eb58c138b9524fffa220fc1d37e195aa3a2e849a128e590c0926bf2d58b486df3b9eb07a6b8871cfb6608f2182
SSDEEP

6144:kfCnB4tuRxfmSEVD4033I637wlV/gBjI7hHHEmTNUv+:kfIzRxfmSEH3IRpZEmh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
59ef8908db1df1f144becadf40c68622_JaffaCakes118

Files

59ef8908db1df1f144becadf40c68622_JaffaCakes118
.exe windows:4 windows x86 arch:x86

78cbb5381339ca65bfc6a1c05432e233

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

ReleaseSemaphore
GetModuleHandleW
GetSystemTimeAsFileTime
CreateFiberEx
TlsGetValue
WaitForSingleObject
GetProcessHeap
TlsAlloc
GetTickCount
TlsFree
DeleteFileW
TerminateThread
Sleep
IsDebuggerPresent
FoldStringW
LoadLibraryA
GetCommandLineW
InterlockedExchange
EnumResourceNamesA
VirtualProtect
RaiseException
GetLastError
InterlockedCompareExchange
GetCurrentProcess
QueryPerformanceCounter
TerminateProcess
GetCurrentThreadId
FlushFileBuffers
LoadLibraryW
GetLocaleInfoW
GetCurrentProcessId
GetStartupInfoA
CloseHandle
FreeLibrary
SetUnhandledExceptionFilter
GetProcAddress
UnhandledExceptionFilter
CreateSemaphoreW
LocalAlloc
GetModuleFileNameW

msimg32

AlphaBlend

setupapi

SetupDiGetDeviceRegistryPropertyW
CMP_WaitNoPendingInstallEvents
CM_Get_DevNode_Status

user32

LoadIconW
RealGetWindowClass
MapVirtualKeyW
ShowWindow
GetSystemMetrics
UpdateWindow
SetWindowPos
IsWindow
IsZoomed
GetParent
SetWindowPlacement
IsIconic
GetWindowPlacement
LoadImageW
DestroyWindow
SetForegroundWindow

Sections

.text
Size: 185KB - Virtual size: 185KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 220KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

78cbb5381339ca65bfc6a1c05432e233

Headers

File Characteristics

Imports

kernel32

msimg32

setupapi

user32

Sections

.text Size: 185KB - Virtual size: 185KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 18KB - Virtual size: 17KB

.tls Size: 512B - Virtual size: 220KB

.text
Size: 185KB - Virtual size: 185KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 18KB - Virtual size: 17KB

.tls
Size: 512B - Virtual size: 220KB