b1b7ae00d29330de43260a5c22aa137a_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

b1b7ae00d29330de43260a5c22aa137a_JaffaCakes118
Size

3.2MB
MD5

b1b7ae00d29330de43260a5c22aa137a
SHA1

cfdd42ec3dd11962a4fbffeccf42c9f81dd93eb5
SHA256

4dbf398bdfd628d192b0b50431195cec3ad2f82fb6acfe5ffa23b9b567862506
SHA512

4a2820a12d5bd666b477ce22969c472da25a2c94b8c822051b242bfe37f0857d8784dbe4d107e26e3163e018f5b53866bf5e9921f1b2a21e91613232557edc89
SSDEEP

24576:RE18fvo2l+w0FhfYLPXfac9xkVrLeKliAceUyFdQfNQ7loc61BqzeD:q1tCeUvPy0FIYpD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b1b7ae00d29330de43260a5c22aa137a_JaffaCakes118

Files

b1b7ae00d29330de43260a5c22aa137a_JaffaCakes118
.exe windows:5 windows x86 arch:x86

a22d841f8a2115cad80093c9c688cd2e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetOEMCP
FindFirstFileW
GetFileAttributesW
GetSystemDirectoryW
GetStartupInfoW
GetModuleFileNameW
CreateMutexW
FormatMessageW
FileTimeToLocalFileTime
GetSystemInfo
GetLocalTime
CloseHandle
SetEndOfFile
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
GetLastError
GetCurrentThreadId
FreeEnvironmentStringsW
GetCurrentProcess
GetStartupInfoA
HeapSize
HeapFree
HeapAlloc
VirtualAlloc
GetVersion
GetModuleHandleA
RtlUnwind

msvcrt

_initterm
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_controlfp
__setusermatherr

setupapi

SetupOpenInfFileW
CM_Get_DevNode_Status
CM_Locate_DevNodeW
SetupFindNextLine
SetupCloseFileQueue
SetupDiBuildDriverInfoList
SetupDiGetActualSectionToInstallW
SetupDiCallClassInstaller
SetupDiGetClassDevsW
SetupDiGetClassDevsExW
SetupDiOpenDeviceInfoW

psapi

GetModuleFileNameExW
GetDeviceDriverBaseNameW
GetDeviceDriverFileNameW
EnumDeviceDrivers

ole32

CoTaskMemRealloc
CoTaskMemAlloc
CoGetMalloc
CoTaskMemFree

comctl32

CreatePropertySheetPageW
ord17
ImageList_Create
ImageList_Destroy
ImageList_SetImageCount
ImageList_Add
ImageList_ReplaceIcon
ImageList_SetBkColor
ImageList_GetBkColor
ImageList_Replace
ImageList_Remove
ImageList_LoadImageW
ImageList_BeginDrag
ImageList_DragEnter
ImageList_DragLeave
ImageList_DragShowNolock
ImageList_GetDragImage
ImageList_Read
ImageList_GetIconSize
ImageList_SetIconSize
FlatSB_SetScrollPos
FlatSB_SetScrollInfo
FlatSB_SetScrollProp
PropertySheetW

Sections

.text
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 64.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.1l5996
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tnni
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 364KB - Virtual size: 364KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a22d841f8a2115cad80093c9c688cd2e

Headers

File Characteristics

Imports

kernel32

msvcrt

setupapi

psapi

ole32

comctl32

Sections

.text Size: 29KB - Virtual size: 28KB

.rdata Size: 3KB - Virtual size: 2KB

.data Size: 512B - Virtual size: 64.4MB

.1l5996 Size: 1.4MB - Virtual size: 1.4MB

.tnni Size: 1.5MB - Virtual size: 1.5MB

.rsrc Size: 364KB - Virtual size: 364KB

.text
Size: 29KB - Virtual size: 28KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 512B - Virtual size: 64.4MB

.1l5996
Size: 1.4MB - Virtual size: 1.4MB

.tnni
Size: 1.5MB - Virtual size: 1.5MB

.rsrc
Size: 364KB - Virtual size: 364KB