821534ecca7f19141dde63f29d8fe9d6_JaffaCakes118

General

Target

821534ecca7f19141dde63f29d8fe9d6_JaffaCakes118
Size

202KB
MD5

821534ecca7f19141dde63f29d8fe9d6
SHA1

0a39ddd72801fba538ecfef4d61e0869051e4ae1
SHA256

8163355af49f1e870a914fde7f5bce8fbb1812b1d21f0a1e6ba8a300990a1aa7
SHA512

abc60223d78c280c2bcaef1f7251aa668465bbe869aa63735a80c7353299ceba54bd1b95b0ccf9673cd4c690e9f9328837d8629f200ac446c07ff5439520d2c2
SSDEEP

6144:uZTDv9PnNiPftzOeX82+ev4gOETP9zXV/zX0:aTb9PnNiPftLM2+e4gO+VA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
821534ecca7f19141dde63f29d8fe9d6_JaffaCakes118

Files

821534ecca7f19141dde63f29d8fe9d6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6c084dc7126bc490f2b8fa14d7097304

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

user32

DestroyWindow
LoadImageW
SetWindowPos
GetParent
IsWindow
ShowWindow
GetWindowPlacement
MapVirtualKeyW
IsZoomed
UpdateWindow
IsIconic
LoadIconW
RealGetWindowClass
SetWindowPlacement
GetSystemMetrics
SetForegroundWindow

msimg32

AlphaBlend

kernel32

SetUnhandledExceptionFilter
CloseHandle
GetCurrentProcessId
GetModuleHandleW
GetTickCount
TlsGetValue
CreateFiberEx
DeleteFileW
LoadLibraryA
UnhandledExceptionFilter
GetLocaleInfoW
ReleaseSemaphore
TerminateProcess
VirtualProtect
GetSystemTimeAsFileTime
GetStartupInfoA
RaiseException
TerminateProcess
LoadLibraryW
LocalAlloc
TlsAlloc
EnumResourceNamesA
FoldStringW
FreeLibrary
GetCurrentThreadId
QueryPerformanceCounter
FlushFileBuffers
Sleep
GetCurrentProcess
TlsFree
CreateSemaphoreW
GetProcAddress
GetLastError
InterlockedExchange
GetCommandLineW
IsDebuggerPresent
GetProcessHeap
InterlockedCompareExchange
WaitForSingleObject
GetModuleFileNameW

setupapi

CMP_WaitNoPendingInstallEvents
SetupDiGetDeviceRegistryPropertyW
CM_Get_DevNode_Status

Sections

.text
Size: 184KB - Virtual size: 184KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 216KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6c084dc7126bc490f2b8fa14d7097304

Headers

File Characteristics

Imports

user32

msimg32

kernel32

setupapi

Sections

.text Size: 184KB - Virtual size: 184KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 14KB - Virtual size: 13KB

.tls Size: 512B - Virtual size: 216KB

.text
Size: 184KB - Virtual size: 184KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 14KB - Virtual size: 13KB

.tls
Size: 512B - Virtual size: 216KB