922535f3d80e2afe82a5bdda3b516c3c_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

922535f3d80e2afe82a5bdda3b516c3c_JaffaCakes118
Size

1.9MB
MD5

922535f3d80e2afe82a5bdda3b516c3c
SHA1

83d5c5f92d7ca75f2a2455a80a2acc88e0cf3612
SHA256

0beeffe4154db9576482f83fc72211df5d56686612b8393e8b4b71e7f2430150
SHA512

3a2a30530566ba53c1cd441e2df81710d1569e5a6e2a5502607479f75139e116380b5006d62d659075e99bf6bc331109ef39679f39a7aa188920edbefd604caa
SSDEEP

24576:JHL04UL3kBd68yNhSe0/n9TQjVStHneRen0CLed:dVULUBA0/2937d

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
922535f3d80e2afe82a5bdda3b516c3c_JaffaCakes118

Files

922535f3d80e2afe82a5bdda3b516c3c_JaffaCakes118
.exe windows:5 windows x86 arch:x86

97d64529cb9baa707c7831146aa58d9a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

winspool.drv

DeleteMonitorW

kernel32

HeapDestroy
GetProcessId
InitializeCriticalSection
SystemTimeToFileTime
TransactNamedPipe
CreateEventW
CreateFileMappingW
VirtualAlloc
GetCommandLineW
FindFirstFileW
WideCharToMultiByte
GetUserDefaultLCID
GetStringTypeW
GetConsoleWindow
CloseHandle
GetModuleFileNameW
CreateFileW
WriteConsoleW
SetFilePointerEx
SetStdHandle
GetConsoleMode
GetConsoleCP
FlushFileBuffers
LCMapStringW
HeapSize
HeapReAlloc
HeapAlloc
OutputDebugStringW
RtlUnwind
LoadLibraryExW
HeapFree
LeaveCriticalSection
EnterCriticalSection
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
IsDebuggerPresent
IsProcessorFeaturePresent
GetModuleHandleW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
TerminateProcess
GetCurrentProcess
Sleep
InitializeCriticalSectionAndSpinCount
SetUnhandledExceptionFilter
UnhandledExceptionFilter
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
WriteFile
GetStartupInfoW
DeleteCriticalSection
GetFileType
GetStdHandle
GetProcessHeap
MultiByteToWideChar
GetProcAddress
GetModuleHandleExW
ExitProcess
DecodePointer
GetCurrentThreadId
SetLastError
RaiseException
EncodePointer
GetLastError

advapi32

RegCloseKey
RegQueryInfoKeyW

user32

MapDialogRect
DrawIconEx
CreateIcon
GetShellWindow
SetParent
PtInRect
OffsetRect
IntersectRect
SetRectEmpty
SetRect
FillRect
GetSysColorBrush
GetCursor
SetCursorPos
ValidateRect
BeginPaint
SetActiveWindow
CreatePopupMenu
GetActiveWindow
CountClipboardFormats
GetDlgItemTextW
EndDialog
DialogBoxParamW
AnyPopup
IsIconic
GetWindowPlacement
ShowOwnedPopups
RegisterClassExW
PostMessageW
DrawEdge

opengl32

glViewport
glTexParameteri
glTexImage2D
glStencilOp
glStencilMask
glReadPixels
glPixelStorei
glIsEnabled
glGetString
glGetIntegerv
glGetError
glFlush
glEnable
glDrawElements
glDrawArrays
glDisable
glDepthMask
glDepthFunc
glCopyTexSubImage2D
glCopyTexImage2D
glColorMask
glClearDepth
glClearColor
glClear
glBlendFunc
glBindTexture
glDeleteTextures

mprapi

MprConfigInterfaceTransportRemove
MprConfigInterfaceTransportAdd
MprConfigTransportGetInfo
MprConfigServerDisconnect

Sections

.text
Size: 79KB - Virtual size: 78KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 446KB - Virtual size: 7.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 1024B - Virtual size: 724B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.e2e6d
Size: 496KB - Virtual size: 496KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.sh46ck
Size: 512KB - Virtual size: 511KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.dcee
Size: 213KB - Virtual size: 212KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.5oe9
Size: 108KB - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 113KB - Virtual size: 113KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

97d64529cb9baa707c7831146aa58d9a

Headers

File Characteristics

Imports

winspool.drv

kernel32

advapi32

user32

opengl32

mprapi

Sections

.text Size: 79KB - Virtual size: 78KB

.data Size: 446KB - Virtual size: 7.1MB

.idata Size: 4KB - Virtual size: 3KB

.xdata Size: 1024B - Virtual size: 724B

.e2e6d Size: 496KB - Virtual size: 496KB

.sh46ck Size: 512KB - Virtual size: 511KB

.dcee Size: 213KB - Virtual size: 212KB

.5oe9 Size: 108KB - Virtual size: 108KB

.rsrc Size: 113KB - Virtual size: 113KB

.text
Size: 79KB - Virtual size: 78KB

.data
Size: 446KB - Virtual size: 7.1MB

.idata
Size: 4KB - Virtual size: 3KB

.xdata
Size: 1024B - Virtual size: 724B

.e2e6d
Size: 496KB - Virtual size: 496KB

.sh46ck
Size: 512KB - Virtual size: 511KB

.dcee
Size: 213KB - Virtual size: 212KB

.5oe9
Size: 108KB - Virtual size: 108KB

.rsrc
Size: 113KB - Virtual size: 113KB