c1b330a376d6663fa9e3a020ee8bc61f_JaffaCakes118

General

Target

c1b330a376d6663fa9e3a020ee8bc61f_JaffaCakes118
Size

333KB
MD5

c1b330a376d6663fa9e3a020ee8bc61f
SHA1

eae90e8fd581121b9fc0ce63c103675439004406
SHA256

e68d151afd8aede113515aef354609523b618bf3399a0aead134cf268d311267
SHA512

1c375505d61d3fbe91bc64285da27ce019a19a0af17c7e58020bf8eed740c7a6f93d7bf5b04acb30306a3f05bdc1b13ce2e35cbeb12d1f92e2c4238de170c784
SSDEEP

6144:Bi87/9wHQi7EmEYIoPOgJq8cdHuRnxRLC4XWuz3zgvpmK/ESMinopGGa:rRs7zFIGOgM8cynxVzMhr/ESMikGG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c1b330a376d6663fa9e3a020ee8bc61f_JaffaCakes118

Files

c1b330a376d6663fa9e3a020ee8bc61f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

01f1dfc42117b2d1625d5f433e4f6ecc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

DeleteObject
SetBkMode
SetTextAlign
SetTextColor
SetBkColor
DeleteDC
ExtTextOutW
SelectObject
CreateCompatibleDC

kernel32

GetCommandLineA
ResetEvent
CloseHandle
GetStringTypeA
SetEvent
ReleaseMutex
FindClose
FindFirstFileW
Sleep
GetFileAttributesExW
CreateThread
GetExitCodeThread
LeaveCriticalSection
EnterCriticalSection
ResumeThread
GetCurrentThreadId
GetSystemTimeAsFileTime
GetTickCount
SetThreadPriority
CreateFileW
GetPrivateProfileStringW
GetFileAttributesW
GetModuleFileNameW
SuspendThread
WaitForMultipleObjects
CreateEventW
FindNextFileW
OutputDebugStringW
DeleteFileW
CreateDirectoryW
TerminateProcess
MultiByteToWideChar
FileTimeToSystemTime
FreeLibrary
GetProcAddress
LoadLibraryA
WideCharToMultiByte
DeleteFileA
GetFileAttributesA
GetTempPathA
GetTempPathW
ReadFile
WriteFile
SetFilePointer
FlushFileBuffers
SetEndOfFile
GetFileSize
LockFile
LockFileEx
UnlockFile

oleaut32

DispGetIDsOfNames
CreateErrorInfo
OleLoadPictureEx
GetErrorInfo
SetErrorInfo
GetActiveObject
VariantInit
SysFreeString

shell32

SHGetFolderPathW
CommandLineToArgvW
ShellExecuteW

msimg32

TransparentBlt

Sections

.text
Size: 209KB - Virtual size: 265KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 120KB - Virtual size: 120KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

01f1dfc42117b2d1625d5f433e4f6ecc

Headers

File Characteristics

Imports

gdi32

kernel32

oleaut32

shell32

msimg32

Sections

.text Size: 209KB - Virtual size: 265KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 120KB - Virtual size: 120KB

.text
Size: 209KB - Virtual size: 265KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 120KB - Virtual size: 120KB