adef96848ae6e61ed0d3782f6711239b_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

adef96848ae6e61ed0d3782f6711239b_JaffaCakes118
Size

384KB
MD5

adef96848ae6e61ed0d3782f6711239b
SHA1

581aaca2d5fafadef12a0ad1556d7e149a71da50
SHA256

36f910cf4a63afa86b711c14d4aecca3f4887232ba341d7581a0e5baa0fd916c
SHA512

4860fe56a5dc55087a8e152d5b4d87f00941721d2ae2787e6e3bc6b79db5df228537d66d2750f95aab6d0ab685c28a51e223141bb3256bc91fc89abb2e4a7d94
SSDEEP

6144:FtguKU1XD9oEmWMF6L2IzjAqXuxoaqHwdfOUavNJ3en9THb3IA/OYILI:kuRBoOc4js11GUfVsNJ3entMAWp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
adef96848ae6e61ed0d3782f6711239b_JaffaCakes118

Files

adef96848ae6e61ed0d3782f6711239b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

fd2b6b7075d499283b63660405526b44

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

rasapi32

RasGetConnectStatusA
RasEnumConnectionsA

msvcrt

_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
sqrt
_ismbcalpha
_exit
_onexit
__dllonexit
_initterm
_jn

advapi32

GetServiceKeyNameA
SetServiceStatus

gdi32

RealizePalette
CreatePen
TextOutA
ExtFloodFill
CreateRectRgn
SelectClipRgn
StretchBlt
SwapBuffers
RectInRegion
SetDIBColorTable
SetWindowExtEx
SetTextCharacterExtra
GetSystemPaletteEntries
GetTextCharsetInfo
GetEnhMetaFileHeader
GetEnhMetaFileBits
GetWinMetaFileBits
GetPolyFillMode
GetWindowOrgEx
Polyline
CreateRoundRectRgn
SetViewportOrgEx
GetTextColor
WidenPath
StartDocA
GetObjectA
Chord
SetStretchBltMode
PlayEnhMetaFileRecord
SetROP2
StartDocW
CreatePolygonRgn
BeginPath
GetROP2
PolyBezierTo
Arc
GetTextExtentPoint32A
EnumFontFamiliesA
GetTextMetricsW
CreateMetaFileA
EnumFontsW
GetGlyphOutlineW
SetTextColor
OffsetClipRgn
DeleteEnhMetaFile
SetWorldTransform
Ellipse
GetDeviceCaps
ExtSelectClipRgn
GetObjectW
StrokePath
CreateDIBSection
EnumFontFamiliesExW
LPtoDP
GetGlyphOutlineA
AbortDoc
CloseEnhMetaFile
CreateFontW
StartPage
GdiFlush
SetDeviceGammaRamp
CreateEllipticRgn
ExtCreateRegion
GetBkColor
PatBlt
GetMapMode
PtVisible
SetPolyFillMode
SetAbortProc
PlayEnhMetaFile
EndDoc
Rectangle
ResizePalette
GetClipRgn
RestoreDC
GetNearestPaletteIndex
CombineRgn
PolyPolyline
EqualRgn
DeleteDC
SetBkColor
GetBitmapBits
GetTextExtentPoint32W
CreatePenIndirect
PolyBezier
EndPath
PolyDraw
CreateICW
MoveToEx
SetViewportExtEx
DPtoLP
CreateEnhMetaFileA
GetRgnBox
GetObjectType
SaveDC
GetCharABCWidthsW
Polygon
FillPath
CreateSolidBrush
GetCharWidthA
GetClipBox

kernel32

GlobalFix
GetThreadPriorityBoost
GetProcessPriorityBoost
EnterCriticalSection
EnumSystemGeoID

mfc42

ord3081
ord2976
ord3401
ord3830
ord3831
ord3825
ord2985
ord4080
ord1061
ord4424
ord3738
ord561
ord1576
ord3262
ord1071
ord4465
ord3259
ord3079
ord1168
ord815
ord6375
ord4486
ord2554
ord1010
ord5731
ord3922
ord1089
ord1023
ord2396
ord3346
ord1061
ord5302
ord2725
ord1067
ord4698
ord5307
ord1005
ord5714
ord1065
ord2982
ord1039

Sections

.text
Size: 240KB - Virtual size: 236KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 64KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 64KB - Virtual size: 3.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fd2b6b7075d499283b63660405526b44

Headers

File Characteristics

Imports

rasapi32

msvcrt

advapi32

gdi32

kernel32

mfc42

Sections

.text Size: 240KB - Virtual size: 236KB

.rdata Size: 64KB - Virtual size: 63KB

.data Size: 64KB - Virtual size: 3.0MB

.rsrc Size: 12KB - Virtual size: 10KB

.text
Size: 240KB - Virtual size: 236KB

.rdata
Size: 64KB - Virtual size: 63KB

.data
Size: 64KB - Virtual size: 3.0MB

.rsrc
Size: 12KB - Virtual size: 10KB