6901004f2e46eff68c3f2efa3f1abc3c_JaffaCakes118

General

Target

6901004f2e46eff68c3f2efa3f1abc3c_JaffaCakes118
Size

333KB
MD5

6901004f2e46eff68c3f2efa3f1abc3c
SHA1

90c26dd2972d79d1c118632ae5b69c00496e4889
SHA256

ea754f41c92e6827f6a1dff2798ea47f8b78bad723e1af1a52c67a03c01a4b97
SHA512

02a63c6faa1eeb8299a6672c04c61ed124a1a727460cf7cdba80025cb9f03ca0fa73d6b0a7e8355d061aa11dca29f289424c5c5f7dcbb9be3cc5e99af45c85d0
SSDEEP

6144:Bi87/9wHQi7Em+YIoPOgJq8cdHuRnxRLC4XWuz3zgvpmK/ESMinopGGa:rRs7znIGOgM8cynxVzMhr/ESMikGG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6901004f2e46eff68c3f2efa3f1abc3c_JaffaCakes118

Files

6901004f2e46eff68c3f2efa3f1abc3c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

01f1dfc42117b2d1625d5f433e4f6ecc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

DeleteObject
SetBkMode
SetTextAlign
SetTextColor
SetBkColor
DeleteDC
ExtTextOutW
SelectObject
CreateCompatibleDC

kernel32

GetCommandLineA
ResetEvent
CloseHandle
GetStringTypeA
SetEvent
ReleaseMutex
FindClose
FindFirstFileW
Sleep
GetFileAttributesExW
CreateThread
GetExitCodeThread
LeaveCriticalSection
EnterCriticalSection
ResumeThread
GetCurrentThreadId
GetSystemTimeAsFileTime
GetTickCount
SetThreadPriority
CreateFileW
GetPrivateProfileStringW
GetFileAttributesW
GetModuleFileNameW
SuspendThread
WaitForMultipleObjects
CreateEventW
FindNextFileW
OutputDebugStringW
DeleteFileW
CreateDirectoryW
TerminateProcess
MultiByteToWideChar
FileTimeToSystemTime
FreeLibrary
GetProcAddress
LoadLibraryA
WideCharToMultiByte
DeleteFileA
GetFileAttributesA
GetTempPathA
GetTempPathW
ReadFile
WriteFile
SetFilePointer
FlushFileBuffers
SetEndOfFile
GetFileSize
LockFile
LockFileEx
UnlockFile

oleaut32

DispGetIDsOfNames
CreateErrorInfo
OleLoadPictureEx
GetErrorInfo
SetErrorInfo
GetActiveObject
VariantInit
SysFreeString

shell32

SHGetFolderPathW
CommandLineToArgvW
ShellExecuteW

msimg32

TransparentBlt

Sections

.text
Size: 209KB - Virtual size: 265KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 120KB - Virtual size: 120KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

01f1dfc42117b2d1625d5f433e4f6ecc

Headers

File Characteristics

Imports

gdi32

kernel32

oleaut32

shell32

msimg32

Sections

.text Size: 209KB - Virtual size: 265KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 120KB - Virtual size: 120KB

.text
Size: 209KB - Virtual size: 265KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 120KB - Virtual size: 120KB