08e1a4572b8871f6014e22e82eb113f7_JaffaCakes118

General

Target

08e1a4572b8871f6014e22e82eb113f7_JaffaCakes118
Size

491KB
MD5

08e1a4572b8871f6014e22e82eb113f7
SHA1

335fbcd909d1b9b7cc85f74542bdbb206d5432f6
SHA256

7edb86c237eca3009525cbd2677e244c85d82b2207b7a3126ba7a3b18d86c4e9
SHA512

10ca603f792150740ce0f6e7cf9f381430b3c20ae0b5c7be540e606890c0131aedc4c786e1b0bc0aae983a673304aebda5c091e7e7489f301a6fbc776b5645a5
SSDEEP

12288:xIuG74D6l4QlEXAZHFUy4r5dY2mRz83ZSO6au:xIuv+lm6HF74r5dnm58X63

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
08e1a4572b8871f6014e22e82eb113f7_JaffaCakes118

Files

08e1a4572b8871f6014e22e82eb113f7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

28a3e7c4db37c06c6f816b609d2a6530

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

rpcrt4

UuidCreate

kernel32

CopyFileW
LCMapStringW
IsBadReadPtr
IsBadWritePtr
GetSystemTime
GetTimeZoneInformation
SystemTimeToTzSpecificLocalTime
CreateFileA
InterlockedExchange
SetDllDirectoryA
HeapSize
HeapReAlloc
HeapFree
GetModuleHandleA
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
FindClose
InitializeCriticalSection
FindNextFileW
InterlockedDecrement

advapi32

CloseEventLog
RegSetValueExW
RegCreateKeyExW
RegQueryValueExW
RegDeleteKeyW
RegOpenKeyExW
RegQueryInfoKeyW
RegCloseKey

gdi32

DeleteObject
CreateSolidBrush
CreateCompatibleBitmap
CreateCompatibleDC
CreateFontIndirectW
PatBlt
CreatePatternBrush
CreateBitmap
GetFontData
DeleteDC
StretchBlt
SetBrushOrgEx
SetStretchBltMode
ExtTextOutW
SetBkColor
GetDeviceCaps
MoveToEx
LineTo
TextOutW
SetTextColor
ExtCreatePen
GetTextExtentPointW
SetBkMode
SelectObject
GetTextExtentPoint32W
GetTextMetricsW
BitBlt

Sections

.text
Size: 265KB - Virtual size: 264KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 124KB - Virtual size: 386KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 98KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

28a3e7c4db37c06c6f816b609d2a6530

Headers

File Characteristics

Imports

rpcrt4

kernel32

advapi32

gdi32

Sections

.text Size: 265KB - Virtual size: 264KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 124KB - Virtual size: 386KB

.reloc Size: 98KB - Virtual size: 100KB

.text
Size: 265KB - Virtual size: 264KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 124KB - Virtual size: 386KB

.reloc
Size: 98KB - Virtual size: 100KB