1042af35325a2d4997f77b0a7e2b812f_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

1042af35325a2d4997f77b0a7e2b812f_JaffaCakes118
Size

369KB
MD5

1042af35325a2d4997f77b0a7e2b812f
SHA1

b3a515bde876166e4cce21d29d1652d4326c4b08
SHA256

c7b1d0702202ca3d3e3076e02f01ebc884d5b917ae781acf5c9af8e08bda9c7e
SHA512

e1cc6f16ee5063c90b21bad3cc7ef5c782257ee8481c9b2f1512dbf8f9acf0412f8c82943f96910ac7f13d8afa8bd8601c5c02c30f51c64d7c30c1feb9c2df7b
SSDEEP

6144:tp3b4rcdZmb1xe6Ie8XKxHTsi1L6bRYay5FB+6ebba6Xl3V:DbS2mxQXwHKNNy5rV6pV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1042af35325a2d4997f77b0a7e2b812f_JaffaCakes118

Files

1042af35325a2d4997f77b0a7e2b812f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

57d30cf4c6fe8d9ef299ca199080a539

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

AdjustWindowRect
DefDlgProcA
DeferWindowPos
GetWindowRect
EnumThreadWindows
GetNextDlgGroupItem
ChildWindowFromPoint
ArrangeIconicWindows
IsDialogMessageA
MoveWindow
BringWindowToTop
FindWindowA
LoadIconA

gdi32

Chord
Arc
EnumObjects
GetBrushOrgEx
CloseEnhMetaFile
ExtEscape
EqualRgn
AngleArc
CreateFontA
AddFontResourceA
DescribePixelFormat
CopyEnhMetaFileW
CopyEnhMetaFileA

advapi32

BackupEventLogA
RegReplaceKeyA
RegOpenKeyExA
OpenEventLogW
ReadEventLogA

kernel32

SetLastError
TlsGetValue
GetLastError
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
LeaveCriticalSection
GetCPInfo
GetStringTypeW
WaitForSingleObject
GlobalFlags
GetTimeFormatA
GetThreadLocale
IsBadWritePtr
EnterCriticalSection
InitializeCriticalSection
ReleaseSemaphore
HeapValidate
GetACP
WriteProfileStringA
GetProfileIntA
GetProcAddress
GetHandleInformation
VirtualAllocEx
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
LoadLibraryA
HeapReAlloc
VirtualAlloc
HeapAlloc
TlsAlloc
TlsSetValue
GetCurrentThreadId
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetOEMCP

winspool.drv

DeletePrinterDriverExA
ConnectToPrinterDlg
EnumJobsW
GetPrinterDriverW
GetPrinterDriverA
AddPrinterConnectionA
SetPrinterA
AbortPrinter

netapi32

NetUserChangePassword
NetLocalGroupDelMembers
NetConnectionEnum
NetGroupAdd
NetConfigSet
NetGetJoinInformation
NetAuditClear
NetFileGetInfo
NetAuditWrite

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 81KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.axcv
Size: 331KB - Virtual size: 330KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

57d30cf4c6fe8d9ef299ca199080a539

Headers

File Characteristics

Imports

user32

gdi32

advapi32

kernel32

winspool.drv

netapi32

Sections

.text Size: 28KB - Virtual size: 27KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 2KB - Virtual size: 81KB

.axcv Size: 331KB - Virtual size: 330KB

.rsrc Size: 3KB - Virtual size: 2KB

.text
Size: 28KB - Virtual size: 27KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 2KB - Virtual size: 81KB

.axcv
Size: 331KB - Virtual size: 330KB

.rsrc
Size: 3KB - Virtual size: 2KB