c0e0199c65997ed72774e881b76fc1d3_JaffaCakes118

General

Target

c0e0199c65997ed72774e881b76fc1d3_JaffaCakes118
Size

193KB
MD5

c0e0199c65997ed72774e881b76fc1d3
SHA1

4c6ff9db92b4973330bd7c45863d326ed8cf27bc
SHA256

f9bea7e2a60f0ef50bcc94c528385999a4ebf0ae227d2f8a5634f4c6a6108458
SHA512

3991a8a815cbd052ebb822d402a57fdafb5434ffdfe951e3b4b8e2b84f7e27ebd51247c2c68c2e87f445d4e9c65375bf4d9f2f5d1c7862cc8509ccb5b6fd763b
SSDEEP

6144:odTxNBYGP8LVenyaL1qlV9nN000IlSWf:ENBYGEi1Wl200IcW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c0e0199c65997ed72774e881b76fc1d3_JaffaCakes118

Files

c0e0199c65997ed72774e881b76fc1d3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3fba42c1a3ee73fad637679affc2451a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DisableThreadLibraryCalls
DeleteFileA
GetTempPathA
SetPriorityClass
GetFileSize
GetCurrentDirectoryW
GetVersionExA
FindNextFileA
WideCharToMultiByte
InterlockedIncrement
GetFileAttributesW
GetTempPathW
GetLastError
WaitForSingleObject
GetExitCodeThread
SetErrorMode
FindClose
InterlockedDecrement
LocalAlloc
GetFileAttributesA
EnumResourceTypesW
FindNextFileW
CopyFileA
GetTempFileNameW
FindFirstFileW
SetFileAttributesW
SetCurrentDirectoryW
MultiByteToWideChar
CreateFileA
FreeLibrary
lstrlenA
CloseHandle
GetPrivateProfileStringW
lstrcmpA
DeleteFileW
SetFileAttributesA
LocalFree
GetModuleFileNameA
ReadFile
GetModuleFileNameW
CreateDirectoryA
GetTempFileNameA

ole32

CoMarshalHresult
StringFromCLSID
CoRevokeClassObject
CoInitialize
CLSIDFromString
CreateItemMoniker
CoInitializeEx
CoUninitialize
StringFromGUID2
CreateStreamOnHGlobal
CoFreeUnusedLibraries
GetRunningObjectTable
CoCreateInstance
CoTaskMemFree
CoRegisterClassObject
CoTaskMemAlloc

gdiplus

GdipGetImageWidth
GdipDisposeImage

Sections

.text
Size: 123KB - Virtual size: 122KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.tls
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 66KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 248KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3fba42c1a3ee73fad637679affc2451a

Headers

File Characteristics

Imports

kernel32

ole32

gdiplus

Sections

.text Size: 123KB - Virtual size: 122KB

.tls Size: 2KB - Virtual size: 1KB

.data Size: 66KB - Virtual size: 65KB

.reloc Size: 1024B - Virtual size: 248KB

.text
Size: 123KB - Virtual size: 122KB

.tls
Size: 2KB - Virtual size: 1KB

.data
Size: 66KB - Virtual size: 65KB

.reloc
Size: 1024B - Virtual size: 248KB