05a9f43251971747772e0fc7187e8a13_JaffaCakes118

General

Target

05a9f43251971747772e0fc7187e8a13_JaffaCakes118
Size

190KB
MD5

05a9f43251971747772e0fc7187e8a13
SHA1

fd3541c1a55f340e2d9c670546f6a654087025c5
SHA256

abaa38a560de27f58c3cb207b2bd425a149da03069a62af0010cebdf76ac404e
SHA512

9a42fc80458911a1c03621292a4661220394e9466e4b1171eb80afc34b5944ee73546deef9036c89573bac72f001320d951bbc3248f1ae0e6a8194bacafc4594
SSDEEP

3072:P30ZDLjc9pj0CIkJYEMQAVR5ej+K3eMY32YECpmn5wWe2nrz4/fgcZZhJ6N8i52c:P30q/RHgQAVR5QU32YxpZMrkgc9+l52c

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
05a9f43251971747772e0fc7187e8a13_JaffaCakes118

Files

05a9f43251971747772e0fc7187e8a13_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4a3cdaa2972855da73782da14e76be65

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

FoldStringW
GetProcAddress
CreateFiberEx
FreeLibrary
LoadLibraryA
RaiseException
CloseHandle
TlsGetValue
IsDebuggerPresent
TerminateProcess
GetCurrentThreadId
GetProcessHeap
UnhandledExceptionFilter
GetStartupInfoA
QueryPerformanceCounter
VirtualProtect
GetCurrentProcessId
LoadLibraryW
TerminateProcess
TlsAlloc
GetCurrentProcess
Sleep
EnumResourceNamesA
ReleaseSemaphore
SetUnhandledExceptionFilter
GetModuleHandleW
GetCommandLineW
FlushFileBuffers
InterlockedCompareExchange
TlsFree
DeleteFileW
InterlockedExchange
LocalAlloc
GetLastError
GetLocaleInfoW
GetSystemTimeAsFileTime
GetTickCount
WaitForSingleObject
CreateSemaphoreW
GetModuleFileNameW

setupapi

CMP_WaitNoPendingInstallEvents
SetupDiGetDeviceRegistryPropertyW
CM_Get_DevNode_Status

user32

IsZoomed
GetWindowPlacement
SetWindowPos
LoadIconW
SetWindowPlacement
GetParent
ShowWindow
UpdateWindow
LoadImageW
MapVirtualKeyW
GetSystemMetrics
IsIconic
DestroyWindow
RealGetWindowClass
IsWindow
SetForegroundWindow

msimg32

AlphaBlend

Sections

.text
Size: 171KB - Virtual size: 171KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4a3cdaa2972855da73782da14e76be65

Headers

File Characteristics

Imports

kernel32

setupapi

user32

msimg32

Sections

.text Size: 171KB - Virtual size: 171KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 15KB - Virtual size: 15KB

.tls Size: 512B - Virtual size: 80KB

.text
Size: 171KB - Virtual size: 171KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 15KB - Virtual size: 15KB

.tls
Size: 512B - Virtual size: 80KB