65ccc4af4a3553f659d5cea7d26e6da3_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

65ccc4af4a3553f659d5cea7d26e6da3_JaffaCakes118
Size

228KB
MD5

65ccc4af4a3553f659d5cea7d26e6da3
SHA1

82a4b51b5c1ff719d7da585e07a1114354ab7f90
SHA256

ff0d91d8e8a32bbeea7df3001e16d14c96b7770211e80e06c370cc356b17a5ea
SHA512

9430c47fb5f5827c3c91f012186d3dbe195c6710f005e9f0b6084dda7e21472c254045ca5dad4942d184ad917cd60ad457c20c2dda9f318a2b47432d9d16dd77
SSDEEP

6144:Wst/xVJo83YkTWVypWgqckj06twtG6KFb2rDagypTKHY:WWxVZ3YkTCT92lw4GgypTa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
65ccc4af4a3553f659d5cea7d26e6da3_JaffaCakes118

Files

65ccc4af4a3553f659d5cea7d26e6da3_JaffaCakes118
.exe windows:5 windows x86 arch:x86

7cddbb7f570413a2293e69bffd4d686f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_AGGRESIVE_WS_TRIM
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
GetProcAddress

advapi32

MD5Init

authz

AuthzFreeHandle

crypt32

CertOpenStore

gdi32

AddFontResourceW

msvcrt

ceil

nddeapi

ord611

ntdll

NtClose

profmap

RemapAndMoveUserW

psapi

EnumProcesses

regapi

RegUserConfigQuery

rpcrt4

UuidCreate

secur32

GetUserNameExW

setupapi

SetupDiGetClassDevsW

user32

SetTimer

userenv

ord130

version

VerQueryValueW

winsta

WinStationReset

ws2_32

WSAStartup

Sections

.MPRESS1
Size: 213KB - Virtual size: 492KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MPRESS2
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

7cddbb7f570413a2293e69bffd4d686f

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

advapi32

authz

crypt32

gdi32

msvcrt

nddeapi

ntdll

profmap

psapi

regapi

rpcrt4

secur32

setupapi

user32

userenv

version

winsta

ws2_32

Sections

.MPRESS1 Size: 213KB - Virtual size: 492KB

.MPRESS2 Size: 4KB - Virtual size: 3KB

.rsrc Size: 10KB - Virtual size: 10KB

.MPRESS1
Size: 213KB - Virtual size: 492KB

.MPRESS2
Size: 4KB - Virtual size: 3KB

.rsrc
Size: 10KB - Virtual size: 10KB