8fb6264b01f4b9332b23c51f041a7e58_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

8fb6264b01f4b9332b23c51f041a7e58_JaffaCakes118
Size

8.5MB
MD5

8fb6264b01f4b9332b23c51f041a7e58
SHA1

588c18e9ee4f39995618d466c7b1eee269a1d888
SHA256

a9c9916a201468f22b2767667766ac3a9512e8d669741114a19ec4da85156f7e
SHA512

1fba46b080332109f5ecb2b701637a77ce67d97fbc029b2eee2489f5ee11bd8124960bb5d6d8f22218c223df4147efc01ce82007617870e2efb0576a302cae67
SSDEEP

98304:x5qZcgbvBGcShGjQKcsytR/T41RYJ5jTo:x5qZcgbvBGcShIQKa/MEHo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8fb6264b01f4b9332b23c51f041a7e58_JaffaCakes118

Files

8fb6264b01f4b9332b23c51f041a7e58_JaffaCakes118
.exe windows:5 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Exports

Exports

CleanregCleanerData
ControlWindowsService
CopyKey
DeleteAllCookiesAndKeepCookiesByHost
DeleteAllCookiesAndKeepCookiesByHost1
DeleteAllEdgeCookies
DeleteAllIECookies
DeleteCookiesByHost
DeleteCookiesByHostAllUsers
DeleteCookiesByHostForFIREFOX
DeleteCookiesByHostForFIREFOXAllUsers
DeleteCookiesByHostForKMeleon
DeleteCookiesByHostForKMeleonAllUsers
DeleteCookiesByHostForWaterfox
DeleteCookiesByHostForWaterfoxAllUsers
DeleteEdgeCookies
DeleteFireFoxC
DeleteFireFoxFavorites
DeleteRegValue
DeleteRegValueWithSamDesired
DeleteRegistryKey
DeleteRegistryKeyWithSamDesired
EnumFireFoxDiaCookiesDetailed
EnumSafariDiaCookiesDetailed
EnumerateIECookiesDetailed
ExecChkDskScan
ExecuteDefrag
ExportSingleValueOrKey
ExportregCleanerData
ForceWriteReg
FragmentCount
GetEdgeCookies
GetFireFoxBookmarks
GetIECookies
GetStatus
GetSubTitle
GetTitleImageIndex
ImportRegistryFile
IsFragmented
KeyHasValues
KeyIsEmpty
ReadRegWithSamDesired
ReconfigureMySampleService
RegeditJump
SaveUndoData
StopDefrag
StopRegCleanerScan
StopService
TestRegKeyCanDelete
TestRegKeyExistsSamDesired
TestRegValueCanDelete
TestRegValueExists
TestRegValueExistsSamDesired
TestServiceIsInstalled
WriteRegWithSamDesired

Sections

.text
Size: 3.6MB - Virtual size: 3.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 923KB - Virtual size: 922KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 141KB - Virtual size: 24.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 111KB - Virtual size: 110KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE

data
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3.7MB - Virtual size: 3.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 103KB - Virtual size: 103KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Headers

DLL Characteristics

File Characteristics

Exports

Exports

Sections

.text Size: 3.6MB - Virtual size: 3.6MB

.rdata Size: 923KB - Virtual size: 922KB

.data Size: 141KB - Virtual size: 24.4MB

.pdata Size: 111KB - Virtual size: 110KB

text Size: 4KB - Virtual size: 3KB

data Size: 16KB - Virtual size: 16KB

.rsrc Size: 3.7MB - Virtual size: 3.7MB

.reloc Size: 103KB - Virtual size: 103KB

.text
Size: 3.6MB - Virtual size: 3.6MB

.rdata
Size: 923KB - Virtual size: 922KB

.data
Size: 141KB - Virtual size: 24.4MB

.pdata
Size: 111KB - Virtual size: 110KB

text
Size: 4KB - Virtual size: 3KB

data
Size: 16KB - Virtual size: 16KB

.rsrc
Size: 3.7MB - Virtual size: 3.7MB

.reloc
Size: 103KB - Virtual size: 103KB