5b3349c5b75cccf73384ffb46835676d_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

5b3349c5b75cccf73384ffb46835676d_JaffaCakes118
Size

208KB
MD5

5b3349c5b75cccf73384ffb46835676d
SHA1

53a8055200dc9215e420fb1370cefb5a9ea00f9b
SHA256

ba37182248f817bc10862b9e5c36fa9a9056de6bf86a9ef815bae88a9e080cdc
SHA512

ef3da14bd74bfb7b4ee7cbbf509c3f02bf2d805cc5de8397e05e605f3eb0d766dc8258213c4afcf5d61a23ad49bd5e975c9f650e458ca807588c32c9ee376a5b
SSDEEP

3072:aGmJ9r9IV6+yJFPPEDli/G+rheQK8Z5NwlLwAdfPF5n0irmVnB4StgRJg5jpj:erXXP6ke+rcQ5aLdfX0iy1B454jp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
5b3349c5b75cccf73384ffb46835676d_JaffaCakes118

Files

5b3349c5b75cccf73384ffb46835676d_JaffaCakes118
.exe windows:5 windows x86 arch:x86

9d5223469ff58a84d0ba8d70962aefd2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

fputc
toupper

ole32

CreateGenericComposite

crypt32

CertFindCertificateInStore

advapi32

ImpersonateSelf
GetSecurityDescriptorLength
LookupAccountNameW

kernel32

GetConsoleWindow
GetOverlappedResult
FreeConsole
FindFirstFileExW
GetPrivateProfileIntA
FindNextFileW
VirtualQueryEx
VirtualProtect
GetDriveTypeA
GetFileAttributesExA
GetConsoleCursorInfo
lstrcmpiA
LocalAlloc
GetModuleFileNameA
GetModuleHandleA
GetBinaryTypeA
GetLastError
DeleteAtom
AllocateUserPhysicalPagesNuma
ApplicationRecoveryInProgress
FindResourceW
GetThreadTimes
SleepEx

wininet

InternetSetDialState
FindNextUrlCacheEntryExA

user32

GetMessageExtraInfo
GetSysColor
LoadCursorA
DeleteMenu
EnumWindows
FindWindowW
GetWindowTextA
DdeKeepStringHandle
GetMenuCheckMarkDimensions
DdeDisconnectList
GetClassWord
IsWindowUnicode
ModifyMenuA

winspool.drv

GetPrinterDriverW

secur32

GetUserNameExA

gdi32

GetBkColor
GetStretchBltMode
GetMapMode
EndDoc
DeleteMetaFile
CreateHatchBrush

oleaut32

VarTokenizeFormatString
GetRecordInfoFromGuids

Sections

.text
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 4KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zdata
Size: 148KB - Virtual size: 144KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9d5223469ff58a84d0ba8d70962aefd2

Headers

DLL Characteristics

File Characteristics

Imports

msvcrt

ole32

crypt32

advapi32

kernel32

wininet

user32

winspool.drv

secur32

gdi32

oleaut32

Sections

.text Size: 28KB - Virtual size: 24KB

.rdata Size: 8KB - Virtual size: 4KB

.text Size: 4KB - Virtual size: 10KB

.zdata Size: 148KB - Virtual size: 144KB

.rsrc Size: 16KB - Virtual size: 14KB

.text
Size: 28KB - Virtual size: 24KB

.rdata
Size: 8KB - Virtual size: 4KB

.text
Size: 4KB - Virtual size: 10KB

.zdata
Size: 148KB - Virtual size: 144KB

.rsrc
Size: 16KB - Virtual size: 14KB