6269cf4585d58242e3f4c5a2c229746e_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

6269cf4585d58242e3f4c5a2c229746e_JaffaCakes118
Size

66KB
MD5

6269cf4585d58242e3f4c5a2c229746e
SHA1

cf91652721ad4dd032f9b7baf187cc23d2806a6c
SHA256

ec5100e6dd386bc66460732f3387f78817a400aee4acabea9e8571c1990fc750
SHA512

649258525a224ef185e2e022e135a7c7bc9ed153896b0da86b6feb354a4928aa615582a7894f22eb76b51eda8050e66cf801016cfd56bf5f46ba9fd077476b79
SSDEEP

1536:xj3zAs/Iq8jtNdLvo1qZoixwanRb4ZnFJfrp:xj3zr8jtNukOixfb4FjDp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6269cf4585d58242e3f4c5a2c229746e_JaffaCakes118

Files

6269cf4585d58242e3f4c5a2c229746e_JaffaCakes118
.exe windows:10 windows x86 arch:x86

53c03a23d8e0e141f62eb9bad56a567f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
GetProcAddress

advapi32

RegCloseKey

api-ms-win-crt-runtime-l1-1-0

_c_exit

api-ms-win-crt-string-l1-1-0

memset

api-ms-win-crt-private-l1-1-0

wcsstr

ole32

CoTaskMemFree

api-ms-win-core-winrt-error-l1-1-0

RoOriginateError

api-ms-win-core-winrt-error-l1-1-1

RoGetMatchingRestrictedErrorInfo

api-ms-win-core-winrt-string-l1-1-0

WindowsDeleteString

api-ms-win-core-winrt-l1-1-0

RoInitialize

api-ms-win-power-setting-l1-1-0

PowerSettingRegisterNotification

api-ms-win-core-synch-l1-2-0

InitOnceExecuteOnce

api-ms-win-core-synch-l1-1-0

ResetEvent

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-string-l1-1-0

GetStringTypeW

api-ms-win-core-errorhandling-l1-1-0

UnhandledExceptionFilter

api-ms-win-core-processthreads-l1-1-0

TerminateProcess

api-ms-win-core-processthreads-l1-1-1

IsProcessorFeaturePresent

api-ms-win-core-sysinfo-l1-1-0

GetSystemTimeAsFileTime

api-ms-win-core-interlocked-l1-1-0

InitializeSListHead

api-ms-win-crt-locale-l1-1-0

_lock_locales

api-ms-win-core-localization-l1-2-0

GetCPInfo

Sections

.MPRESS1
Size: 59KB - Virtual size: 212KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MPRESS2
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

53c03a23d8e0e141f62eb9bad56a567f

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

advapi32

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-private-l1-1-0

ole32

api-ms-win-core-winrt-error-l1-1-0

api-ms-win-core-winrt-error-l1-1-1

api-ms-win-core-winrt-string-l1-1-0

api-ms-win-core-winrt-l1-1-0

api-ms-win-power-setting-l1-1-0

api-ms-win-core-synch-l1-2-0

api-ms-win-core-synch-l1-1-0

api-ms-win-core-profile-l1-1-0

api-ms-win-core-string-l1-1-0

api-ms-win-core-errorhandling-l1-1-0

api-ms-win-core-processthreads-l1-1-0

api-ms-win-core-processthreads-l1-1-1

api-ms-win-core-sysinfo-l1-1-0

api-ms-win-core-interlocked-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-core-localization-l1-2-0

Sections

.MPRESS1 Size: 59KB - Virtual size: 212KB

.MPRESS2 Size: 5KB - Virtual size: 4KB

.rsrc Size: 1KB - Virtual size: 1KB

.MPRESS1
Size: 59KB - Virtual size: 212KB

.MPRESS2
Size: 5KB - Virtual size: 4KB

.rsrc
Size: 1KB - Virtual size: 1KB