f5fb53649ae085d81f74cbc38dfbe611_JaffaCakes118

General

Target

f5fb53649ae085d81f74cbc38dfbe611_JaffaCakes118
Size

168KB
MD5

f5fb53649ae085d81f74cbc38dfbe611
SHA1

1f0b02a35b448d2b9ff767163080f3f4057c9b69
SHA256

c87a349afd4ad2cbb055b4196fdf2fbdeac203d5f22360152ed131021c81871e
SHA512

cc38ec2e934a8fb561d2bb354392e080970beac9be0e7e162de0dc5396b72e9660d4389394821fad82f7b07abb3afcf2399a1a453708ccda7e881c6da6c576aa
SSDEEP

3072:xIoiMI0pebGOgSA1gfSuJDZMCCigYLLTj4CzZj4Uiu2MyMklL5MpVuLyS2uZG:qTMI0EXcgtZQMr40jBiQklUQLX2uZG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f5fb53649ae085d81f74cbc38dfbe611_JaffaCakes118

Files

f5fb53649ae085d81f74cbc38dfbe611_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7c2029526fb2c90c3ad30492352cd634

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

SHGetFolderPathW

newdev

UpdateDriverForPlugAndPlayDevicesW

gdi32

DeleteObject
GetTextMetricsA
GetTextExtentPointA
SelectObject
GetDeviceCaps
CreateFontIndirectA

ole32

CoGetTreatAsClass
CoTaskMemFree
CoCreateInstance
StringFromGUID2
CoTaskMemAlloc
CoTaskMemRealloc

msimg32

AlphaBlend
TransparentBlt

kernel32

UnhandledExceptionFilter
FreeEnvironmentStringsW
HeapSize
WideCharToMultiByte
GetOEMCP
GetCPInfoExW
lstrlenW
SetHandleCount
GetCPInfo
GetThreadLocale
InterlockedIncrement
FreeEnvironmentStringsA
RaiseException
GetStartupInfoA
EnumResourceTypesA
TlsSetValue
WriteFile
GetTickCount
InitializeCriticalSection
DeleteCriticalSection
GetEnvironmentStrings
MultiByteToWideChar
EnterCriticalSection
GetVersionExA
GetLogicalDriveStringsA
GetEnvironmentStringsW
InterlockedExchange
GetLastError
TlsGetValue
GetStdHandle
QueryPerformanceCounter
GetLocaleInfoA
LeaveCriticalSection
GetACP
GetFileType
GetCurrentProcessId

Sections

.text
Size: 101KB - Virtual size: 101KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.tls
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 63KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7c2029526fb2c90c3ad30492352cd634

Headers

File Characteristics

Imports

shell32

newdev

gdi32

ole32

msimg32

kernel32

Sections

.text Size: 101KB - Virtual size: 101KB

.tls Size: 2KB - Virtual size: 1KB

.data Size: 63KB - Virtual size: 62KB

.reloc Size: 1024B - Virtual size: 104KB

.text
Size: 101KB - Virtual size: 101KB

.tls
Size: 2KB - Virtual size: 1KB

.data
Size: 63KB - Virtual size: 62KB

.reloc
Size: 1024B - Virtual size: 104KB