2fd5ad4c40f6a421402c9ce550b21b52_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

2fd5ad4c40f6a421402c9ce550b21b52_JaffaCakes118
Size

84KB
MD5

2fd5ad4c40f6a421402c9ce550b21b52
SHA1

5a4daa02ac662636db7bf33d20ed739ddef5f123
SHA256

fb6feb7f04a38a71e9203b12eeb7838d0ca2eec8f922e64f615edbbcbdbeec38
SHA512

e4988d15370cb2445baa813ab568a3e8bed5b79e3c3224dacf8469a04507bb254f4f312b1434a480e465e8810452bb6465a012d8962cf38a39ec65b1273f4fc6
SSDEEP

1536:GOnQjmMr0HUsmINkCKXh0jKD/GQsT5pXExlaWRqqQDiwllc:GOnSrkUsmIah2KDW5pXSRMllc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2fd5ad4c40f6a421402c9ce550b21b52_JaffaCakes118

Files

2fd5ad4c40f6a421402c9ce550b21b52_JaffaCakes118
.exe windows:5 windows x86 arch:x86

041e8a84f021bb798c407226541811fd

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CommConfigDialogW
GetNamedPipeInfo
GlobalWire
GetPrivateProfileSectionA
GetFileSizeEx
GlobalAlloc
LoadLibraryA
Sleep
VirtualAlloc
LocalLock
LoadLibraryW
AddLocalAlternateComputerNameA
BuildCommDCBAndTimeoutsA
DeleteFileW
GetEnvironmentStringsA
SearchPathW
LocalAlloc

userenv

GetProfileType
ExpandEnvironmentStringsForUserW
GetGPOListW
EnterCriticalPolicySection
WaitForUserPolicyForegroundProcessing
DeleteProfileA
DllUnregisterServer
DllRegisterServer
GetAppliedGPOListA
RsopResetPolicySettingStatus
ProcessGroupPolicyCompleted
DllCanUnloadNow
GetProfilesDirectoryA
LoadUserProfileW
FreeGPOListW
UnregisterGPNotification
ForceSyncFgPolicy

gdi32

GetGlyphOutline
DdEntry22
GdiCleanCacheDC
MaskBlt
GdiGetSpoolMessage
GetTextMetricsA
GetWindowExtEx
OffsetWindowOrgEx
DdEntry44
CreateFontW
EngQueryLocalTime
GdiPlayPageEMF
DeleteObject
GdiIsPlayMetafileDC
EnumMetaFile

ole32

IsValidIid
HWND_UserUnmarshal
OleBuildVersion
OleCreateLinkToFileEx
CoTaskMemAlloc
CoLoadLibrary
OleConvertIStorageToOLESTREAMEx
GetHGlobalFromStream
WdtpInterfacePointer_UserFree
HMENU_UserUnmarshal
CoAddRefServerProcess
OleQueryCreateFromData
CLSIDFromProgID
OleSetAutoConvert
CoGetClassObject
SNB_UserSize

uxtheme

GetThemeBackgroundRegion
GetThemeSysBool
GetThemeEnumValue
GetThemeDocumentationProperty
GetThemeBool
OpenThemeData
GetCurrentThemeName
GetThemeRect
GetThemeInt
GetThemeSysString
GetThemeSysInt
GetThemeSysColorBrush
IsThemeActive
GetThemeBackgroundExtent

Sections

.text
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 21KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 264B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

041e8a84f021bb798c407226541811fd

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

userenv

gdi32

ole32

uxtheme

Sections

.text Size: 38KB - Virtual size: 38KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 21KB - Virtual size: 29KB

.rsrc Size: 20KB - Virtual size: 19KB

.reloc Size: 512B - Virtual size: 264B

.text
Size: 38KB - Virtual size: 38KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 21KB - Virtual size: 29KB

.rsrc
Size: 20KB - Virtual size: 19KB

.reloc
Size: 512B - Virtual size: 264B