3876bf7019206addaf51c4f0b151dda3_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

3876bf7019206addaf51c4f0b151dda3_JaffaCakes118
Size

239KB
MD5

3876bf7019206addaf51c4f0b151dda3
SHA1

cc804696789355c44c5b833751c482fab99d49b3
SHA256

aa2ef32d04795e7e4c30065cddda27f510109b8110bbeafea704ca2b06c89a8c
SHA512

b193369996c4e873410c7ec81c356dc18ac1f09fbbbd8ad82f41f5b4be2c9e330782afdd402e69b791e494b65e7721f930770f02ca4bd761fbf3c5fe330ccea4
SSDEEP

6144:wIAG57uQTpkpWsJYu+OR7BpriXqbKg9AMJCx:wIj1FWN1+oeGg5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3876bf7019206addaf51c4f0b151dda3_JaffaCakes118

Files

3876bf7019206addaf51c4f0b151dda3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

63a1cb4484bdd6a461f48b8c91c502d2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

CoCreateGuid
StringFromGUID2
CoUninitialize
CoInitialize

advapi32

RegCloseKey
RegSetValueExW
RegOpenKeyExW

kernel32

LeaveCriticalSection
GetCurrentThreadId
WritePrivateProfileStringW
IsDebuggerPresent
DeleteCriticalSection
GetSystemTimeAsFileTime
UnhandledExceptionFilter
EnterCriticalSection
GetPrivateProfileStringW
SetUnhandledExceptionFilter
GetPrivateProfileSectionW
GetStartupInfoW
VirtualAllocEx

user32

LoadStringW

mscms

CreateProfileFromLogColorSpaceW
UnregisterCMMW
GetStandardColorSpaceProfileA
RegisterCMMA
InternalGetPS2ColorSpaceArray
GetColorProfileFromHandle
SelectCMM
CreateDeviceLinkProfile

stclient

DllGetClassObject

Sections

.text
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.LFXtPI
Size: 512B - Virtual size: 222B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.KnGQ
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gX
Size: 512B - Virtual size: 712B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ITK
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.qmaMjr
Size: 512B - Virtual size: 254B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.OXd
Size: 512B - Virtual size: 755B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 212KB - Virtual size: 280KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 924B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

63a1cb4484bdd6a461f48b8c91c502d2

Headers

DLL Characteristics

File Characteristics

Imports

ole32

advapi32

kernel32

user32

mscms

stclient

Sections

.text Size: 17KB - Virtual size: 17KB

.LFXtPI Size: 512B - Virtual size: 222B

.KnGQ Size: 1KB - Virtual size: 1KB

.gX Size: 512B - Virtual size: 712B

.rdata Size: 1KB - Virtual size: 1KB

.ITK Size: 2KB - Virtual size: 1KB

.qmaMjr Size: 512B - Virtual size: 254B

.OXd Size: 512B - Virtual size: 755B

.data Size: 212KB - Virtual size: 280KB

.rsrc Size: 1024B - Virtual size: 924B

.text
Size: 17KB - Virtual size: 17KB

.LFXtPI
Size: 512B - Virtual size: 222B

.KnGQ
Size: 1KB - Virtual size: 1KB

.gX
Size: 512B - Virtual size: 712B

.rdata
Size: 1KB - Virtual size: 1KB

.ITK
Size: 2KB - Virtual size: 1KB

.qmaMjr
Size: 512B - Virtual size: 254B

.OXd
Size: 512B - Virtual size: 755B

.data
Size: 212KB - Virtual size: 280KB

.rsrc
Size: 1024B - Virtual size: 924B