a6b7faea8a82eb496bd131d3644143cc_JaffaCakes118

General

Target

a6b7faea8a82eb496bd131d3644143cc_JaffaCakes118
Size

213KB
MD5

a6b7faea8a82eb496bd131d3644143cc
SHA1

2be5a98f8bffa5613b57ff2fa1c454d22e35efb9
SHA256

b457eff3de5a2725fcfdfe9d0908af2dd272b669d78275bc62bc3734e97947c7
SHA512

04cec2d112a58811f96ec77b0a548855983ab3f92855ff1952a3c3816fc3edbf765fb8a19a9db4fab36e0ad398a64f2418f6b40627ff2fa4c2e8a3906630c7f1
SSDEEP

6144:Kz8RM0nCpXDNUyztFDB+L7w8Wm8y/xt762xMe:m8RM7TUxHw8SU762xMe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a6b7faea8a82eb496bd131d3644143cc_JaffaCakes118

Files

a6b7faea8a82eb496bd131d3644143cc_JaffaCakes118
.exe windows:4 windows x86 arch:x86

90df0c512fbceb6b523cf09ad3c09eb7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

user32

GetSystemMetrics
MapVirtualKeyW
SetWindowPos
GetParent
LoadIconW
GetWindowPlacement
DestroyWindow
UpdateWindow
LoadImageW
RealGetWindowClass
SetWindowPlacement
IsWindow
IsIconic
ShowWindow
IsZoomed
SetForegroundWindow

msimg32

AlphaBlend

kernel32

ReleaseSemaphore
LocalAlloc
GetLastError
UnhandledExceptionFilter
GetCommandLineW
CreateFiberEx
InterlockedExchange
GetTickCount
CloseHandle
TlsGetValue
GetCurrentThreadId
GetCurrentProcessId
GetProcessHeap
IsDebuggerPresent
TerminateProcess
LoadLibraryA
GetCurrentProcess
EnumResourceNamesA
GetLocaleInfoW
GetProcAddress
GetSystemTimeAsFileTime
CreateSemaphoreW
GetModuleHandleW
FlushFileBuffers
RaiseException
TerminateProcess
FoldStringW
DeleteFileW
Sleep
VirtualProtect
TlsFree
GetStartupInfoA
TlsAlloc
QueryPerformanceCounter
LoadLibraryW
InterlockedCompareExchange
WaitForSingleObject
SetUnhandledExceptionFilter
FreeLibrary
GetModuleFileNameW

setupapi

CMP_WaitNoPendingInstallEvents
SetupDiGetDeviceRegistryPropertyW
CM_Get_DevNode_Status

Sections

.text
Size: 186KB - Virtual size: 186KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

90df0c512fbceb6b523cf09ad3c09eb7

Headers

File Characteristics

Imports

user32

msimg32

kernel32

setupapi

Sections

.text Size: 186KB - Virtual size: 186KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 23KB - Virtual size: 23KB

.tls Size: 512B - Virtual size: 96KB

.text
Size: 186KB - Virtual size: 186KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 23KB - Virtual size: 23KB

.tls
Size: 512B - Virtual size: 96KB