0934720c1ddaa900e5a89a5040a57819_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

0934720c1ddaa900e5a89a5040a57819_JaffaCakes118
Size

4.3MB
MD5

0934720c1ddaa900e5a89a5040a57819
SHA1

b8fbaec04b94a3b3705d0bd91f7adebe93f2c033
SHA256

37b18890d5e74c1dcf3da1c5a8a00dc415f7ce9d4b56ea28d6e9d2a47ed37346
SHA512

85e55bf1bfd0224da2a8e7f3d697c02df342f76f7752393e24ce38016b4c1a3f780fb1fd848f99166a5f0a157ab1cab317ceefbb45046de2df97751c67f9cb96
SSDEEP

98304:0xMwNQ4icQkAeNkej5O2LIqO0ZFpOWxUGGa6+nNt257pQ/NmGHilw52hK:dOf/FpOWx56sNE5lCYGh2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0934720c1ddaa900e5a89a5040a57819_JaffaCakes118

Files

0934720c1ddaa900e5a89a5040a57819_JaffaCakes118
.exe windows:5 windows x86 arch:x86

75f66c4db5d6891ae6317163a48a7bc6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetVersionExA
LoadLibraryA
LocalAlloc
GetCurrentProcess
GetCurrentThread
LocalFree
GetModuleFileNameW
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
GetLastError
FreeLibrary
LoadLibraryA
GetModuleHandleA

user32

GetAsyncKeyState
CharUpperBuffW

gdi32

LineTo

msimg32

AlphaBlend

winspool.drv

OpenPrinterA

advapi32

SystemFunction036
RegQueryValueExA
OpenSCManagerW
EnumServicesStatusExW
OpenServiceW
QueryServiceConfigW
CloseServiceHandle

shell32

SHGetSpecialFolderPathW

shlwapi

PathFindFileNameA

uxtheme

GetThemeSysColor

ole32

CoInitializeEx

oleaut32

LoadTypeLi

winmm

PlaySoundA

wininet

InternetReadFile

oleacc

AccessibleObjectFromWindow

gdiplus

GdipBitmapLockBits

imm32

ImmGetContext

wtsapi32

WTSSendMessageW

Sections

.text
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 306KB - Virtual size: 305KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 296B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.asd0
Size: 2.1MB - Virtual size: 2.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.asd1
Size: 261KB - Virtual size: 260KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 265KB - Virtual size: 264KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

75f66c4db5d6891ae6317163a48a7bc6

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

msimg32

winspool.drv

advapi32

shell32

shlwapi

uxtheme

ole32

oleaut32

winmm

wininet

oleacc

gdiplus

imm32

wtsapi32

Sections

.text Size: 1.3MB - Virtual size: 1.3MB

.rdata Size: 306KB - Virtual size: 305KB

.data Size: 20KB - Virtual size: 45KB

.gfids Size: 512B - Virtual size: 296B

.tls Size: 512B - Virtual size: 9B

.asd0 Size: 2.1MB - Virtual size: 2.1MB

.asd1 Size: 261KB - Virtual size: 260KB

.rsrc Size: 265KB - Virtual size: 264KB

.text
Size: 1.3MB - Virtual size: 1.3MB

.rdata
Size: 306KB - Virtual size: 305KB

.data
Size: 20KB - Virtual size: 45KB

.gfids
Size: 512B - Virtual size: 296B

.tls
Size: 512B - Virtual size: 9B

.asd0
Size: 2.1MB - Virtual size: 2.1MB

.asd1
Size: 261KB - Virtual size: 260KB

.rsrc
Size: 265KB - Virtual size: 264KB