564238f3e0190715b160b32245242bca_JaffaCakes118

General

Target

564238f3e0190715b160b32245242bca_JaffaCakes118
Size

168KB
MD5

564238f3e0190715b160b32245242bca
SHA1

61360927dcdf4ce1d30b7a73f672a12b409f074c
SHA256

7205699e301fe6c41d92d9960c1e7be2cb3adc7c51bb447f32f0fbcf6e561428
SHA512

6817406618f873c6f984b547997cc20c0e5b71519b1637a43d32f892c667098d52c066f705e5e08d15eff39eb0600ec5a83bd1203071fa8a3e21a24a95d3cbcc
SSDEEP

3072:maPjHVJnO4C+nAyui/asHTD2zZAbxq1R2w3LnSRz/CqHCz8:njHVW+n/uQzCzZgMPP3LC0z8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
564238f3e0190715b160b32245242bca_JaffaCakes118

Files

564238f3e0190715b160b32245242bca_JaffaCakes118
.exe windows:4 windows x86 arch:x86

733d47e8cf51b3632fc04a7660b77c99

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapSize
GetCPInfo
GetCPInfoExW
WriteFile
GetThreadLocale
GetACP
GetEnvironmentStrings
DeleteCriticalSection
GetStartupInfoA
GetVersionExA
MultiByteToWideChar
GetOEMCP
GetTickCount
GetLastError
EnumResourceTypesA
TlsGetValue
EnterCriticalSection
GetStdHandle
FreeEnvironmentStringsA
LeaveCriticalSection
InterlockedExchange
RaiseException
GetFileType
InitializeCriticalSection
GetLocaleInfoA
QueryPerformanceCounter
WideCharToMultiByte
InterlockedIncrement
GetComputerNameW
FreeEnvironmentStringsW
TlsSetValue
GetEnvironmentStringsW
lstrlenW
SetHandleCount
UnhandledExceptionFilter
GetCurrentProcessId

ole32

CoGetMalloc
CoTaskMemAlloc
CoCreateInstance
StringFromGUID2
CoTaskMemFree
CoTaskMemRealloc

gdi32

GetDeviceCaps
GetTextExtentPointA
DeleteObject
SelectObject
GetTextMetricsA
CreateFontIndirectA

msimg32

AlphaBlend
TransparentBlt

newdev

UpdateDriverForPlugAndPlayDevicesW

shell32

SHGetFolderPathW

Sections

.text
Size: 100KB - Virtual size: 99KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.tls
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 64KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

733d47e8cf51b3632fc04a7660b77c99

Headers

File Characteristics

Imports

kernel32

ole32

gdi32

msimg32

newdev

shell32

Sections

.text Size: 100KB - Virtual size: 99KB

.tls Size: 2KB - Virtual size: 1KB

.data Size: 64KB - Virtual size: 63KB

.reloc Size: 1024B - Virtual size: 108KB

.text
Size: 100KB - Virtual size: 99KB

.tls
Size: 2KB - Virtual size: 1KB

.data
Size: 64KB - Virtual size: 63KB

.reloc
Size: 1024B - Virtual size: 108KB