7cec17b6b28156596948440473181c6d_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

7cec17b6b28156596948440473181c6d_JaffaCakes118
Size

418KB
MD5

7cec17b6b28156596948440473181c6d
SHA1

705f9c7ef612ffd0480a38f0c98f7fce6c368b7e
SHA256

da7439c58fcf71e27fb8c5d9ff5e6991dc30cb4191d943b4aabab3b421504b5e
SHA512

ec2cb9b733c2baa43bbf0c649b6ad9e35aebd376851db4b763f85ed3663770aaa95904cdf49a3676ae12dde40ffd330c043f1c9286a446a9474acbfc1528270a
SSDEEP

12288:z1PxHGy7AsqX0ca38eKfSrpGiwP3XOtYD8P+Oh:z1p7wEtIKpGF3XOqJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7cec17b6b28156596948440473181c6d_JaffaCakes118

Files

7cec17b6b28156596948440473181c6d_JaffaCakes118
.exe windows:5 windows x86 arch:x86

480992822154301a0cd16d4a0fb6bba2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTimeZoneInformation
MultiByteToWideChar
lstrlenW
DisconnectNamedPipe
LocalAlloc
SetCalendarInfoW
WriteProfileSectionW
ConvertDefaultLocale
GetModuleFileNameA
FreeEnvironmentStringsW
RequestWakeupLatency
VirtualProtect
OutputDebugStringA
GetCPInfoExA
_lopen
GetVersionExA
TerminateJobObject
EnumCalendarInfoExA
GetMailslotInfo
SwitchToThread
CreateFileW
CloseHandle
WriteConsoleW
SetStdHandle
GetStringTypeW
LCMapStringW
FlushFileBuffers
HeapReAlloc
LoadLibraryW
TransactNamedPipe
GetComputerNameExA
EnumResourceTypesA
CreateActCtxW
GetCompressedFileSizeW
GetNumaAvailableMemoryNode
CreateJobObjectW
LoadResource
GetNumaProcessorNode
TlsFree
lstrlenA
HeapSize
GetConsoleMode
GetCommandLineW
HeapSetInformation
GetStartupInfoW
RaiseException
HeapAlloc
GetLastError
HeapFree
IsProcessorFeaturePresent
EnterCriticalSection
LeaveCriticalSection
DecodePointer
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EncodePointer
TerminateProcess
GetCurrentProcess
GetProcAddress
GetModuleHandleW
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameW
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
TlsAlloc
TlsGetValue
TlsSetValue
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
Sleep
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
RtlUnwind
SetFilePointer
WideCharToMultiByte
GetConsoleCP

user32

GetKeyboardLayoutList
LoadMenuIndirectA
CharUpperBuffW
ImpersonateDdeClientWindow
SetSystemCursor
RegisterClassExA
GetMessageExtraInfo
CreateDesktopA
GetClipboardFormatNameA
GetGUIThreadInfo
IsCharAlphaNumericW
SetPropA
CharUpperBuffA
GetUserObjectInformationW
LoadCursorA

gdi32

AnimatePalette
GetWindowExtEx
GetEnhMetaFileA
CreateDIBSection
EnumFontFamiliesExA
TextOutW
CloseEnhMetaFile
GetTextColor
GdiComment
GetMiterLimit

winspool.drv

DeviceCapabilitiesW

Sections

.text
Size: 54KB - Virtual size: 54KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 3.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 319KB - Virtual size: 319KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

480992822154301a0cd16d4a0fb6bba2

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

winspool.drv

Sections

.text Size: 54KB - Virtual size: 54KB

.rdata Size: 21KB - Virtual size: 21KB

.data Size: 5KB - Virtual size: 3.8MB

.rsrc Size: 319KB - Virtual size: 319KB

.reloc Size: 16KB - Virtual size: 15KB

.text
Size: 54KB - Virtual size: 54KB

.rdata
Size: 21KB - Virtual size: 21KB

.data
Size: 5KB - Virtual size: 3.8MB

.rsrc
Size: 319KB - Virtual size: 319KB

.reloc
Size: 16KB - Virtual size: 15KB