JaffaCakes118_2b200d36c66ff147402fb1ff3dcfa68a

General

Target

JaffaCakes118_2b200d36c66ff147402fb1ff3dcfa68a
Size

290KB
MD5

2b200d36c66ff147402fb1ff3dcfa68a
SHA1

326964207cba04795cc1d652b25af358deaabd2d
SHA256

003ba757647f9533ec5a35c620f8bbca52844caeb7cc75e49499af4bb752a1d2
SHA512

822abea5411a22f4ade4c623cbc58c6ad20259b49ab205cbb9291f5227524a3b1beb4e326caea9cde67e5e458433a778db993e3866a92a6b71a6701f5e32a490
SSDEEP

3072:2a/gW6HEmZjS8yGGXYjRQEDYXy48Vf8S5xu40hI5qOwgjGZGYj4iX+jpFeA:rgHHmGGXYy9tGfz240huqOxc1j4G+lF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_2b200d36c66ff147402fb1ff3dcfa68a

Files

JaffaCakes118_2b200d36c66ff147402fb1ff3dcfa68a
.exe windows:6 windows x86 arch:x86

250018d8d4a7643dc8c0ecadc27d0b3b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdiplus

GdipGetImageWidth
GdipDisposeImage

kernel32

GetCurrentProcess
MulDiv
QueryPerformanceCounter
GetTempPathA
SetPriorityClass
HeapFree
RaiseException
InterlockedCompareExchange
GetTempFileNameA
GetLocaleInfoW
GetCurrentProcessId
GetStartupInfoA
CreateProcessA
EnumResourceTypesA
GetProcessHeap
IsDebuggerPresent
GetLocaleInfoA
InterlockedExchange
GetVersionExA
TerminateProcess
GetPrivateProfileIntA
UnhandledExceptionFilter
GetACP
SetUnhandledExceptionFilter
HeapAlloc
GetThreadLocale
VirtualProtect
GetSystemTimeAsFileTime
TlsFree

ole32

CoMarshalHresult
CoCreateInstance
StringFromCLSID
CoTaskMemFree
StringFromGUID2
CoRegisterClassObject
CoRevokeClassObject
CoFreeUnusedLibraries
CreateItemMoniker
CoInitializeEx
CoUninitialize
CreateStreamOnHGlobal
CLSIDFromString
CoInitialize
GetRunningObjectTable
CoTaskMemAlloc

Sections

.text
Size: 116KB - Virtual size: 116KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.tls
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 67KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 104KB - Virtual size: 105KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

250018d8d4a7643dc8c0ecadc27d0b3b

Headers

File Characteristics

Imports

gdiplus

kernel32

ole32

Sections

.text Size: 116KB - Virtual size: 116KB

.tls Size: 1KB - Virtual size: 1KB

.data Size: 67KB - Virtual size: 66KB

.reloc Size: 104KB - Virtual size: 105KB

.text
Size: 116KB - Virtual size: 116KB

.tls
Size: 1KB - Virtual size: 1KB

.data
Size: 67KB - Virtual size: 66KB

.reloc
Size: 104KB - Virtual size: 105KB