7193bdca385220b875a2e1cc0314c179_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

7193bdca385220b875a2e1cc0314c179_JaffaCakes118
Size

2.3MB
MD5

7193bdca385220b875a2e1cc0314c179
SHA1

0ac7a7c05a5c71a4d170c4dd49dfa583edfdd9d5
SHA256

d1795fa7e48d926a75c812436aa7d84f40a56899467323754ccb3b275460335b
SHA512

de589b9114f25f65ba50ec79833664a4e74f1adaa867a59b020e8c043d73a09ea528cde724b6121f0e36065651320e934505156d1d6a588af84410876db9b68c
SSDEEP

24576:YQomCKdQFTV8Tx1jgano7Q+TLiWInI+mCYyXMUtJcOM12b1sLv092V:YQom8sVJD7DlXDZe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7193bdca385220b875a2e1cc0314c179_JaffaCakes118

Files

7193bdca385220b875a2e1cc0314c179_JaffaCakes118
.exe windows:5 windows x86 arch:x86

6f55befc76a2778d68ce819b319dc9d3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegDeleteValueW
RegQueryValueExW
OpenSCManagerW
RegDeleteKeyW

user32

LoadStringW
ClientToScreen
GetWindowRect
SetWindowTextW
SetForegroundWindow
DrawIcon
GetMenuCheckMarkDimensions
ModifyMenuW
LoadAcceleratorsW
CharPrevW
IsClipboardFormatAvailable
SendDlgItemMessageW
IsZoomed
PostThreadMessageW

comctl32

InitializeFlatSB
FlatSB_SetScrollPos
ImageList_GetDragImage
ImageList_DragEnter
ImageList_EndDrag
ImageList_BeginDrag
ImageList_GetIcon
ImageList_AddMasked
ImageList_ReplaceIcon
ImageList_Create
InitCommonControlsEx
CreatePropertySheetPageW

kernel32

HeapSize
FlushFileBuffers
GetConsoleCP
GetConsoleMode
SetStdHandle
SetFilePointerEx
WriteConsoleW
CreateFileW
GlobalLock
VirtualAlloc
HeapDestroy
SwitchToThread
LeaveCriticalSection
WaitForMultipleObjects
SetHandleCount
SetEndOfFile
CloseHandle
MulDiv
GetLocalTime
GetNamedPipeInfo
FlushViewOfFile
CreateEventW
GetProfileIntW
CreateDirectoryW
CreateJobObjectW
CompareStringW
LCMapStringW
GetStringTypeW
GetCommandLineW
RaiseException
EncodePointer
GetLastError
SetLastError
GetCurrentThreadId
DecodePointer
ExitProcess
GetModuleHandleExW
GetProcAddress
MultiByteToWideChar
WideCharToMultiByte
GetProcessHeap
GetStdHandle
GetFileType
DeleteCriticalSection
GetStartupInfoW
GetModuleFileNameW
WriteFile
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
Sleep
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
IsProcessorFeaturePresent
IsDebuggerPresent
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
EnterCriticalSection
HeapFree
LoadLibraryExW
RtlUnwind
OutputDebugStringW
HeapAlloc
HeapReAlloc

winspool.drv

DeleteMonitorW

ole32

ReleaseStgMedium
CreateStreamOnHGlobal
CoTaskMemAlloc

Sections

.text
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2.3MB - Virtual size: 8.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6f55befc76a2778d68ce819b319dc9d3

Headers

File Characteristics

Imports

advapi32

user32

comctl32

kernel32

winspool.drv

ole32

Sections

.text Size: 80KB - Virtual size: 80KB

.data Size: 2.3MB - Virtual size: 8.6MB

.idata Size: 3KB - Virtual size: 3KB

.xdata Size: 5KB - Virtual size: 4KB

.text
Size: 80KB - Virtual size: 80KB

.data
Size: 2.3MB - Virtual size: 8.6MB

.idata
Size: 3KB - Virtual size: 3KB

.xdata
Size: 5KB - Virtual size: 4KB