ba0bd0c24fd49b30b6e0bf019ac47f20_JaffaCakes118

General

Target

ba0bd0c24fd49b30b6e0bf019ac47f20_JaffaCakes118
Size

156KB
MD5

ba0bd0c24fd49b30b6e0bf019ac47f20
SHA1

19b469fcb4e1fd579bd17292fe56dbcbad7c8f4d
SHA256

6158b7c49cdec769b1cadbff328ba4f05fee36fc1b933791da2469cd4aae7f75
SHA512

5bbf14afa841ff3ab218775977ece39c0766853ea197f1e1a0d4245a231e8a57421c9aa350a6c12668349158f09e5063ded763eddfcf9b03fdef47c9a58295ce
SSDEEP

3072:gBAFVNt24gRk4RSSYI2+SeK9H7QSwdqLeQ5ZzrCwHv94TmKsw7/:gBF4j4RSSc+SXwdqqEZzrzHv9KmK77

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ba0bd0c24fd49b30b6e0bf019ac47f20_JaffaCakes118

Files

ba0bd0c24fd49b30b6e0bf019ac47f20_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b1c057579d84950df65c9c0e868928dc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

shell32

SHGetFileInfoW

gdi32

GetOutlineTextMetricsW
CreateFontIndirectW
DeleteObject
SelectObject
GetTextMetricsW
AddFontResourceExW

psapi

GetProcessMemoryInfo

ole32

CoRegisterClassObject
StringFromGUID2
CoInitialize
CoUninitialize
CoTaskMemFree
CoRevokeClassObject
CoCreateInstance
CoTaskMemRealloc
CoTaskMemAlloc
StringFromCLSID

oleacc

LresultFromObject
CreateStdAccessibleObject

kernel32

GlobalAlloc
lstrcmpiW
FillConsoleOutputAttribute
GetACP
OutputDebugStringW
GetProcessWorkingSetSize
FindClose
GlobalFree
LockResource
GetTickCount
lstrlenW
GetLastError
GetCPInfo
EnumResourceNamesW
lstrcpyA
FreeEnvironmentStringsW
CreateFileMappingW
lstrcpyW
WideCharToMultiByte
InitializeCriticalSection
MultiByteToWideChar
GetModuleHandleW

user32

PostThreadMessageW
CharNextW
DispatchMessageW
GetWindowLongA
GetDC
GetMessageW
SetTimer
TranslateMessage
CharUpperW
KillTimer
wsprintfW
UnregisterClassA

advapi32

RegCloseKey
RegCreateKeyExW
RegEnumKeyExW
RegQueryInfoKeyW
RegOpenKeyExW
RegDeleteValueW
RegDeleteKeyW
RegSetValueExW

Sections

.text
Size: 98KB - Virtual size: 97KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 54KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.isete
Size: 1024B - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b1c057579d84950df65c9c0e868928dc

Headers

File Characteristics

Imports

shell32

gdi32

psapi

ole32

oleacc

kernel32

user32

advapi32

Sections

.text Size: 98KB - Virtual size: 97KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 54KB - Virtual size: 53KB

.isete Size: 1024B - Virtual size: 100KB

.text
Size: 98KB - Virtual size: 97KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 54KB - Virtual size: 53KB

.isete
Size: 1024B - Virtual size: 100KB