JaffaCakes118_76446975071b3d7bca4551b4a9fa53a5

General

Target

JaffaCakes118_76446975071b3d7bca4551b4a9fa53a5
Size

200KB
MD5

76446975071b3d7bca4551b4a9fa53a5
SHA1

22ac8497f32e8aebcc95a174558265917ca07350
SHA256

786aa1e9f98fabbcd356c1cd1ea1c5dd115d33bbfa02d140391247c66dfc45f3
SHA512

7df707885ca926145a1220d8a385f88e3d404477681e6ee333ae028070badb1abddf3435b7452bb0c0e64382ef550ad16930fdc36bd648018bb99822a3047d82
SSDEEP

6144:cZilzeAzEQJFqNU407ZrZNhuuqEMqstq6y0yLMs3:KiljzvKNyBfhuXEiCFL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_76446975071b3d7bca4551b4a9fa53a5

Files

JaffaCakes118_76446975071b3d7bca4551b4a9fa53a5
.exe windows:4 windows x86 arch:x86

7bb583fbf5ea008e23461b9755dfc404

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

setupapi

CMP_WaitNoPendingInstallEvents
SetupDiGetDeviceRegistryPropertyW
CM_Get_DevNode_Status

kernel32

CreateFiberEx
IsDebuggerPresent
TlsGetValue
LoadLibraryW
WaitForSingleObject
InterlockedCompareExchange
GetStartupInfoA
TerminateProcess
FoldStringW
TerminateThread
UnhandledExceptionFilter
FreeLibrary
TlsFree
VirtualProtect
GetCurrentProcess
CreateSemaphoreW
ReleaseSemaphore
GetSystemTimeAsFileTime
EnumResourceNamesA
GetLastError
GetLocaleInfoW
LocalAlloc
Sleep
GetCurrentProcessId
RaiseException
CloseHandle
GetModuleHandleW
InterlockedExchange
FlushFileBuffers
DeleteFileW
LoadLibraryA
GetCurrentThreadId
GetTickCount
GetCommandLineW
TlsAlloc
SetUnhandledExceptionFilter
QueryPerformanceCounter
GetProcessHeap
GetProcAddress
GetModuleFileNameW

msimg32

AlphaBlend

user32

IsZoomed
GetWindowPlacement
LoadIconW
GetSystemMetrics
DestroyWindow
UpdateWindow
IsIconic
IsWindow
LoadImageW
ShowWindow
RealGetWindowClass
MapVirtualKeyW
GetParent
SetWindowPos
SetWindowPlacement
SetForegroundWindow

Sections

.text
Size: 177KB - Virtual size: 176KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 220KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7bb583fbf5ea008e23461b9755dfc404

Headers

File Characteristics

Imports

setupapi

kernel32

msimg32

user32

Sections

.text Size: 177KB - Virtual size: 176KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 19KB - Virtual size: 19KB

.tls Size: 512B - Virtual size: 220KB

.text
Size: 177KB - Virtual size: 176KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 19KB - Virtual size: 19KB

.tls
Size: 512B - Virtual size: 220KB