6c3a0a21264ae6d6ae64cb87d10dba83_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

6c3a0a21264ae6d6ae64cb87d10dba83_JaffaCakes118
Size

102KB
MD5

6c3a0a21264ae6d6ae64cb87d10dba83
SHA1

a699a894bd6a600be5f395b330b3462e829f52fe
SHA256

f94f046a2ccaeb96db40b98e2dce5a071e248685d2f3d6a4b2bd0e20a881ec4b
SHA512

0b750504fa0a5f2488b7f419a5a350d6dfa15cfff7874607e35507d680618777e5f76e66f5c2d72f566f8600aee1d15882609732bde77fe45f2b5fe5872967d7
SSDEEP

1536:P6zCcQcqajAyu2/F3ncyDgWt7RAZYT+mM36z6aQQIS7SdGgT8yDjPm2Xorxe3QTv:P6zCcVjmwc6gWBRAAz6aQQc/3LyrYyL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6c3a0a21264ae6d6ae64cb87d10dba83_JaffaCakes118

Files

6c3a0a21264ae6d6ae64cb87d10dba83_JaffaCakes118
.exe windows:5 windows x86 arch:x86

9f02484fcbe41d1813b157d35da87165

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_AGGRESIVE_WS_TRIM
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
GetProcAddress

msvcrt

exit

msvcp60

?_Nomemory@std@@YAXXZ

advapi32

CopySid

rpcrt4

RpcStringFreeW

tapi32

lineOpenW

ntdll

RtlValidRelativeSecurityDescriptor

user32

wsprintfW

ole32

OleRun

netapi32

NetMessageBufferSend

crypt32

CryptHashMessage

credui

CredUIParseUserNameW

faultrep

ReportFault

fxstiff

TiffOpen

version

VerQueryValueW

gdi32

EndDoc

winspool.drv

SetPrinterW

oleaut32

VariantClear

shlwapi

SHCopyKeyW

Sections

.MPRESS1
Size: 95KB - Virtual size: 248KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MPRESS2
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

9f02484fcbe41d1813b157d35da87165

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

msvcrt

msvcp60

advapi32

rpcrt4

tapi32

ntdll

user32

ole32

netapi32

crypt32

credui

faultrep

fxstiff

version

gdi32

winspool.drv

oleaut32

shlwapi

Sections

.MPRESS1 Size: 95KB - Virtual size: 248KB

.MPRESS2 Size: 4KB - Virtual size: 3KB

.rsrc Size: 2KB - Virtual size: 2KB

.MPRESS1
Size: 95KB - Virtual size: 248KB

.MPRESS2
Size: 4KB - Virtual size: 3KB

.rsrc
Size: 2KB - Virtual size: 2KB