a6175f66ee616babce10de7fb7390489_JaffaCakes118

General

Target

a6175f66ee616babce10de7fb7390489_JaffaCakes118
Size

167KB
MD5

a6175f66ee616babce10de7fb7390489
SHA1

0a74f99cb64ae59f0ca00f55ba3d6241cdd1cfb3
SHA256

c8fa8e46edac49198c527b8e9cdfaea43bf30fc7f3d5d32a67f98d48aa7356b6
SHA512

742ccf93b78d3fc8c53556f7eb80dddbef76b54ef215aa1bd9dafc7a9adbf1ba3f32450b96044bb1ed41b4df04ef39aca56fc64749c92ccc80d40cb1d8181732
SSDEEP

3072:h1hsBYbgT+A5mgQQE5oh2HwW8l/KT43jqsrRZBX5440tXYc/cb:hzsBmgT+MM2o8Br3uCZIltIc/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a6175f66ee616babce10de7fb7390489_JaffaCakes118

Files

a6175f66ee616babce10de7fb7390489_JaffaCakes118
.exe windows:4 windows x86 arch:x86

40aab5cc26560fc6c1a9f635c9fa7cee

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msimg32

AlphaBlend
TransparentBlt

newdev

UpdateDriverForPlugAndPlayDevicesW

shell32

SHGetFolderPathW

gdi32

SelectObject
GetTextMetricsA
GetTextExtentPointA
GetDeviceCaps
DeleteObject
CreateFontIndirectA

ole32

CoGetMalloc
CoTaskMemAlloc
CoTaskMemFree
CoCreateInstance
StringFromGUID2
CoTaskMemRealloc

kernel32

GetACP
InitializeCriticalSection
lstrlenW
GetLastError
DeleteCriticalSection
GetCPInfoExW
InterlockedIncrement
GetStartupInfoA
LeaveCriticalSection
GetFileType
HeapSize
GetOEMCP
MultiByteToWideChar
GetStdHandle
EnumResourceTypesA
GetEnvironmentStrings
QueryPerformanceCounter
EnterCriticalSection
GetThreadLocale
InterlockedExchange
GetCPInfo
TlsGetValue
SetHandleCount
FreeEnvironmentStringsA
GetLogicalDriveStringsA
WideCharToMultiByte
GetLocaleInfoA
FreeEnvironmentStringsW
TlsSetValue
WriteFile
GetTickCount
GetVersionExA
UnhandledExceptionFilter
RaiseException
GetEnvironmentStringsW
GetCurrentProcessId

Sections

.text
Size: 96KB - Virtual size: 96KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.tls
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 67KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

40aab5cc26560fc6c1a9f635c9fa7cee

Headers

File Characteristics

Imports

msimg32

newdev

shell32

gdi32

ole32

kernel32

Sections

.text Size: 96KB - Virtual size: 96KB

.tls Size: 2KB - Virtual size: 1KB

.data Size: 67KB - Virtual size: 66KB

.reloc Size: 1024B - Virtual size: 104KB

.text
Size: 96KB - Virtual size: 96KB

.tls
Size: 2KB - Virtual size: 1KB

.data
Size: 67KB - Virtual size: 66KB

.reloc
Size: 1024B - Virtual size: 104KB