ae3869c9d8a01dfa91eac0aa7507e76a_JaffaCakes118

General

Target

ae3869c9d8a01dfa91eac0aa7507e76a_JaffaCakes118
Size

215KB
MD5

ae3869c9d8a01dfa91eac0aa7507e76a
SHA1

96ea027d58d9851e15657cdf8f79c43443712bc5
SHA256

689e98952c80c8b35417e630a36dcba70d891ba8b75f873cc009db5c32f67b26
SHA512

51beeed01f3f4e421caaf40f13a6774d91ec9bdd959e7d7596e60434e81669df438ebc6723615211c59adec84bd4e384558d7a48944a51f69b67902f85ce7913
SSDEEP

6144:eholGHjQ6Z07otxG3ye/8VO8baWQGBSnLx3c3BxlRzyuc0:eeGDQ6uoOl/8VO8bx7Woya

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ae3869c9d8a01dfa91eac0aa7507e76a_JaffaCakes118

Files

ae3869c9d8a01dfa91eac0aa7507e76a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8b46375fa1e6c56675e3cc4330b9a97d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

user32

RealGetWindowClass
LoadImageW
IsZoomed
IsWindow
SetWindowPlacement
LoadIconW
GetParent
SetWindowPos
IsIconic
MapVirtualKeyW
DestroyWindow
GetWindowPlacement
ShowWindow
GetSystemMetrics
UpdateWindow
SetForegroundWindow

setupapi

SetupDiGetDeviceRegistryPropertyW
CMP_WaitNoPendingInstallEvents
CM_Get_DevNode_Status

kernel32

WaitForSingleObject
CreateFiberEx
GetSystemTimeAsFileTime
GetLocaleInfoW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetModuleHandleW
CloseHandle
LoadLibraryW
TlsFree
ReleaseSemaphore
GetTickCount
TerminateProcess
GetProcAddress
GetCurrentProcess
DeleteFileW
GetProcessHeap
EnumResourceNamesA
LoadLibraryA
InterlockedExchange
FoldStringW
RaiseException
InterlockedCompareExchange
GetLastError
FlushFileBuffers
QueryPerformanceCounter
CreateSemaphoreW
LocalAlloc
GetCurrentProcessId
TlsGetValue
FreeLibrary
IsDebuggerPresent
GetCurrentThreadId
TlsAlloc
VirtualProtect
GetStartupInfoA
GetCommandLineW
Sleep
GetModuleFileNameW

msimg32

AlphaBlend

Sections

.text
Size: 192KB - Virtual size: 191KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8b46375fa1e6c56675e3cc4330b9a97d

Headers

File Characteristics

Imports

user32

setupapi

kernel32

msimg32

Sections

.text Size: 192KB - Virtual size: 191KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 20KB - Virtual size: 19KB

.tls Size: 512B - Virtual size: 96KB

.text
Size: 192KB - Virtual size: 191KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 20KB - Virtual size: 19KB

.tls
Size: 512B - Virtual size: 96KB