07cb7bfe1bf9a3ad803389a7848e82c0_JaffaCakes118

General

Target

07cb7bfe1bf9a3ad803389a7848e82c0_JaffaCakes118
Size

385KB
MD5

07cb7bfe1bf9a3ad803389a7848e82c0
SHA1

8042d6b813a0fa1f61fb124c78cd5b9d05958b40
SHA256

78e3797f267e6884c03ce5fb2b9c4c0afee35939510df162e710c93365cf6ac3
SHA512

b4cbf73a1b9ea6b83e39296add1f0cf4449703bd78eecac35a2a90db28a7992450b48af27dc36e69ab434669ea9c193cd581211e2dd7b394eb51c9d0a80209e1
SSDEEP

12288:dE4Skfuk5k9820R9Hf9Bkd/iIg4qOQviUynbFI:dE4lbW82wF2Bi/9NObFI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
07cb7bfe1bf9a3ad803389a7848e82c0_JaffaCakes118

Files

07cb7bfe1bf9a3ad803389a7848e82c0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

142cd9c6836a56408e44e484dd9d69c4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

crypt32

RegQueryValueExU
RegDeleteValueU
RegOpenKeyExU
RegCreateKeyExU
RegSetValueExU

kernel32

CreateFileA
InterlockedIncrement
GetTickCount
Sleep
HeapCreate
GetSystemDirectoryA
VirtualFree
ReadFile
GetStdHandle
CloseHandle

gdi32

UnrealizeObject
TextOutW
TextOutA
StretchDIBits
StretchBlt
StartPage
StartDocA
SetWindowOrgEx
SetWinMetaFileBits
SetViewportOrgEx
SetTextColor
SetTextAlign
SetStretchBltMode
SetRectRgn
SetROP2
SetPixelV
SetPixel
SetMapMode
SetEnhMetaFileBits
SetDIBColorTable
SetBrushOrgEx

version

VerQueryValueW
VerQueryValueA
GetFileVersionInfoSizeW
GetFileVersionInfoSizeA
GetFileVersionInfoW
GetFileVersionInfoA

advapi32

RegOpenKeyExA
RegQueryValueExA

Sections

.text
Size: 512B - Virtual size: 458B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 379KB - Virtual size: 879KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.DATA
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

142cd9c6836a56408e44e484dd9d69c4

Headers

File Characteristics

Imports

crypt32

kernel32

gdi32

version

advapi32

Sections

.text Size: 512B - Virtual size: 458B

.rdata Size: 1KB - Virtual size: 4KB

.data Size: 2KB - Virtual size: 3KB

.rsrc Size: 379KB - Virtual size: 879KB

.DATA Size: 512B - Virtual size: 512B

.text
Size: 512B - Virtual size: 458B

.rdata
Size: 1KB - Virtual size: 4KB

.data
Size: 2KB - Virtual size: 3KB

.rsrc
Size: 379KB - Virtual size: 879KB

.DATA
Size: 512B - Virtual size: 512B