2c6e8b55ec2beb6ed16874e3e809573b_JaffaCakes118

General

Target

2c6e8b55ec2beb6ed16874e3e809573b_JaffaCakes118
Size

369KB
MD5

2c6e8b55ec2beb6ed16874e3e809573b
SHA1

221f4a333fffd85f544c71949661f73b62eed173
SHA256

843c8d5bebe93aeaebeb940267b6b9fb4d8ddb392a316be0f6d58e0bcf940109
SHA512

8c48aa13e678ef8988d16198aa0dd767e6255e75f56c405fee03f1ea99852243b83c8e99bca703b7046eed97cf1ee8ffdce55580375805266b536d4dae3f9bce
SSDEEP

6144:2o07Ev9jgh+J0J+l/moekR1MlvlMa0FIe03ncsCMYZx/FqDN6TETpspvQrMX1r9:2tQVG+JIe/mGzMNlMVFC3Xi/YwOi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
2c6e8b55ec2beb6ed16874e3e809573b_JaffaCakes118

Files

2c6e8b55ec2beb6ed16874e3e809573b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

fa472a98ed15899bd6b764aeb995d7e6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mpr

WNetConnectionDialog
WNetAddConnectionA
WNetCancelConnectionA
WNetDisconnectDialog
WNetAddConnection2A

gdi32

CreateEllipticRgn
EnumFontFamiliesExW
Rectangle
GetEnhMetaFileBits
PlayEnhMetaFile
SetColorAdjustment
IntersectClipRect
CreateCompatibleDC
GetTextAlign
ExtFloodFill
LPtoDP
StartDocW
CreateCompatibleBitmap
StrokePath
GetKerningPairsA
FillRgn
GetBitmapBits
SetPixelFormat
SetPolyFillMode
ScaleWindowExtEx
GetTextExtentPointA
GetTextExtentPoint32W
BitBlt
RealizePalette
SelectClipRgn
GetMapMode
CreatePen
EndPage
CreateFontW
GetCharABCWidthsW
Polyline
GetROP2
StartPage
PlayEnhMetaFileRecord

oleaut32

LPSAFEARRAY_UserFree

msvcrt

__getmainargs
wctomb
vprintf
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
_acmdln
pow
_fcloseall
_iob
_onexit
__dllonexit

advapi32

BuildExplicitAccessWithNameA
GetTrusteeTypeA
BuildImpersonateTrusteeA
CreateServiceA
GetTrusteeFormA

user32

CreateIconFromResource
SendNotifyMessageA

kernel32

OpenSemaphoreA
Module32Next
GetCommandLineA

Sections

.text
Size: 92KB - Virtual size: 90KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 40KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 56KB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 68KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fa472a98ed15899bd6b764aeb995d7e6

Headers

File Characteristics

Imports

mpr

gdi32

oleaut32

msvcrt

advapi32

user32

kernel32

Sections

.text Size: 92KB - Virtual size: 90KB

.rdata Size: 40KB - Virtual size: 36KB

.data Size: 56KB - Virtual size: 1.1MB

.rsrc Size: 68KB - Virtual size: 66KB

.text
Size: 92KB - Virtual size: 90KB

.rdata
Size: 40KB - Virtual size: 36KB

.data
Size: 56KB - Virtual size: 1.1MB

.rsrc
Size: 68KB - Virtual size: 66KB