787e8dc867c70918fea0ac3a36d2a627_JaffaCakes118

General

Target

787e8dc867c70918fea0ac3a36d2a627_JaffaCakes118
Size

213KB
MD5

787e8dc867c70918fea0ac3a36d2a627
SHA1

5ee898d157631d839c39e02e99550809931c5cff
SHA256

3533cefbce589206c8451a7145ad577aaf41b90b093e2f0f549e0f79addc7a02
SHA512

4025b77e1cbb79a122d3f3d5c4f746ce729e9c0378e0bcd21dce85bc4b6e5767a0088586a04a6f5e4880dd0c0c8b9c752d4186dc26b1ad4fb3d0f29573c7fc68
SSDEEP

6144:Kz8RM0nCpXDNUyztFDB+L7w8Wm8y/xt762xMe:m8RM7TUxHw8SU762xMe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
787e8dc867c70918fea0ac3a36d2a627_JaffaCakes118

Files

787e8dc867c70918fea0ac3a36d2a627_JaffaCakes118
.exe windows:4 windows x86 arch:x86

90df0c512fbceb6b523cf09ad3c09eb7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

user32

GetSystemMetrics
MapVirtualKeyW
SetWindowPos
GetParent
LoadIconW
GetWindowPlacement
DestroyWindow
UpdateWindow
LoadImageW
RealGetWindowClass
SetWindowPlacement
IsWindow
IsIconic
ShowWindow
IsZoomed
SetForegroundWindow

msimg32

AlphaBlend

kernel32

ReleaseSemaphore
LocalAlloc
GetLastError
UnhandledExceptionFilter
GetCommandLineW
CreateFiberEx
InterlockedExchange
GetTickCount
CloseHandle
TlsGetValue
GetCurrentThreadId
GetCurrentProcessId
GetProcessHeap
IsDebuggerPresent
TerminateProcess
LoadLibraryA
GetCurrentProcess
EnumResourceNamesA
GetLocaleInfoW
GetProcAddress
GetSystemTimeAsFileTime
CreateSemaphoreW
GetModuleHandleW
FlushFileBuffers
RaiseException
TerminateProcess
FoldStringW
DeleteFileW
Sleep
VirtualProtect
TlsFree
GetStartupInfoA
TlsAlloc
QueryPerformanceCounter
LoadLibraryW
InterlockedCompareExchange
WaitForSingleObject
SetUnhandledExceptionFilter
FreeLibrary
GetModuleFileNameW

setupapi

CMP_WaitNoPendingInstallEvents
SetupDiGetDeviceRegistryPropertyW
CM_Get_DevNode_Status

Sections

.text
Size: 186KB - Virtual size: 186KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

90df0c512fbceb6b523cf09ad3c09eb7

Headers

File Characteristics

Imports

user32

msimg32

kernel32

setupapi

Sections

.text Size: 186KB - Virtual size: 186KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 23KB - Virtual size: 23KB

.tls Size: 512B - Virtual size: 96KB

.text
Size: 186KB - Virtual size: 186KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 23KB - Virtual size: 23KB

.tls
Size: 512B - Virtual size: 96KB