69327c29a3185b5c6f54a011b8ec1be6_JaffaCakes118

General

Target

69327c29a3185b5c6f54a011b8ec1be6_JaffaCakes118
Size

362KB
MD5

69327c29a3185b5c6f54a011b8ec1be6
SHA1

d22b587620100c9b6919e6762e6db7387df90ba0
SHA256

462b8438f0af9cb91bab4211be12986f82f71d730d00dd0054df7997d52dea71
SHA512

fb153065b55a869bb3ed3b1713b4471d45ca3ea0fcceb8b490c9931fe485021de691f49d2ed19c20ba89388f5296623b785834d13381ee53cdb4ca677bb7b289
SSDEEP

6144:12XNqG7uXiVLAcs6cdogql0HoqM6kdt8mpl1pMwWyosxGPzdux2G01cVwbfClnEe:1iNzuyVLtsBdogt0dlsYcE01cVwbOnEe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
69327c29a3185b5c6f54a011b8ec1be6_JaffaCakes118

Files

69327c29a3185b5c6f54a011b8ec1be6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

28a3e7c4db37c06c6f816b609d2a6530

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

rpcrt4

UuidCreate

kernel32

CopyFileW
LCMapStringW
IsBadReadPtr
IsBadWritePtr
GetSystemTime
GetTimeZoneInformation
SystemTimeToTzSpecificLocalTime
CreateFileA
InterlockedExchange
SetDllDirectoryA
HeapSize
HeapReAlloc
HeapFree
GetModuleHandleA
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
FindClose
InitializeCriticalSection
FindNextFileW
InterlockedDecrement

advapi32

CloseEventLog
RegSetValueExW
RegCreateKeyExW
RegQueryValueExW
RegDeleteKeyW
RegOpenKeyExW
RegQueryInfoKeyW
RegCloseKey

gdi32

DeleteObject
CreateSolidBrush
CreateCompatibleBitmap
CreateCompatibleDC
CreateFontIndirectW
PatBlt
CreatePatternBrush
CreateBitmap
GetFontData
DeleteDC
StretchBlt
SetBrushOrgEx
SetStretchBltMode
ExtTextOutW
SetBkColor
GetDeviceCaps
MoveToEx
LineTo
TextOutW
SetTextColor
ExtCreatePen
GetTextExtentPointW
SetBkMode
SelectObject
GetTextExtentPoint32W
GetTextMetricsW
BitBlt

Sections

.text
Size: 265KB - Virtual size: 264KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 124KB - Virtual size: 386KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 98KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

28a3e7c4db37c06c6f816b609d2a6530

Headers

File Characteristics

Imports

rpcrt4

kernel32

advapi32

gdi32

Sections

.text Size: 265KB - Virtual size: 264KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 124KB - Virtual size: 386KB

.reloc Size: 98KB - Virtual size: 100KB

.text
Size: 265KB - Virtual size: 264KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 124KB - Virtual size: 386KB

.reloc
Size: 98KB - Virtual size: 100KB