c95fc06a48c617ac8c4cb0a8d862643c_JaffaCakes118

General

Target

c95fc06a48c617ac8c4cb0a8d862643c_JaffaCakes118
Size

216KB
MD5

c95fc06a48c617ac8c4cb0a8d862643c
SHA1

83591da8cb176e09c07a90906fa6baf6847af573
SHA256

d326bc47518e601fee75a802e907d37d4639c7eabae43ba313f869ec6e39497b
SHA512

ed341838d1013a06861b86a52ad95f2538ff85efdd1aa645d1c26d46ed5939d5b424d45bc3dc68a0bdde9e1f8875c284ec4fb779d7881ec81d81a2b011970ba5
SSDEEP

6144:YiXpzLN8QHWmcDR0GPccD9rXw6sUmGKHv6G2w7A3Ez:bzh8QHW5VlUc5rLmtRz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c95fc06a48c617ac8c4cb0a8d862643c_JaffaCakes118

Files

c95fc06a48c617ac8c4cb0a8d862643c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3615cbe3ed3ab0adcf7189263ddb0d3f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

user32

GetSystemMetrics
IsZoomed
IsIconic
LoadIconW
LoadImageW
RealGetWindowClass
GetWindowPlacement
UpdateWindow
SetWindowPos
GetParent
SetWindowPlacement
IsWindow
DestroyWindow
ShowWindow
MapVirtualKeyW
SetForegroundWindow

msimg32

AlphaBlend

setupapi

CMP_WaitNoPendingInstallEvents
SetupDiGetDeviceRegistryPropertyW
CM_Get_DevNode_Status

kernel32

GetCommandLineW
CloseHandle
TlsGetValue
GetCurrentThreadId
TlsFree
InterlockedExchange
CreateFiberEx
GetProcessHeap
GetModuleHandleW
GetCurrentProcess
LoadLibraryA
WaitForSingleObject
TerminateProcess
TerminateProcess
LocalAlloc
SetUnhandledExceptionFilter
InterlockedCompareExchange
FreeLibrary
EnumResourceNamesA
GetCurrentProcessId
GetStartupInfoA
GetProcAddress
GetTickCount
RaiseException
Sleep
CreateSemaphoreW
IsDebuggerPresent
UnhandledExceptionFilter
FlushFileBuffers
TlsAlloc
GetLastError
GetLocaleInfoW
QueryPerformanceCounter
VirtualProtect
GetSystemTimeAsFileTime
LoadLibraryW
ReleaseSemaphore
FoldStringW
DeleteFileW
GetModuleFileNameW

Sections

.text
Size: 195KB - Virtual size: 195KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3615cbe3ed3ab0adcf7189263ddb0d3f

Headers

File Characteristics

Imports

user32

msimg32

setupapi

kernel32

Sections

.text Size: 195KB - Virtual size: 195KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 17KB - Virtual size: 16KB

.tls Size: 512B - Virtual size: 92KB

.text
Size: 195KB - Virtual size: 195KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 17KB - Virtual size: 16KB

.tls
Size: 512B - Virtual size: 92KB