4ddd3ec7089501c48f7816676d1fd90f_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

4ddd3ec7089501c48f7816676d1fd90f_JaffaCakes118
Size

204KB
MD5

4ddd3ec7089501c48f7816676d1fd90f
SHA1

658a64c54d7e46a34225a8577acd14361bba7636
SHA256

d7816b9d8f57e07510ecec329a2d8b392ef995e576053dc5b3ccdbf6862f0761
SHA512

2493241c43df162d5fd68af3e1e222404884d1e997715d37f7be9f0a758396fd116f7433e89c9dfd91521ecd51e6c9a1141f5040a602572312696325d295409c
SSDEEP

6144:VveY2TNgrT9xrb4KgGiB7z/a9Qrtgq7KRO:VkhAT9xn4KgGiB7bS8tzus

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4ddd3ec7089501c48f7816676d1fd90f_JaffaCakes118

Files

4ddd3ec7089501c48f7816676d1fd90f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d14e22ee5de0cc56f4e8bdee1753465a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DosDateTimeToFileTime
RaiseException
GetDiskFreeSpaceW
GetWindowsDirectoryA
SetErrorMode
ReplaceFileA
SetComputerNameW
GetLongPathNameA
CreateDirectoryA
OpenWaitableTimerA
GetModuleHandleA
CreateMutexW
ExitProcess
CreateMailslotA
ReadDirectoryChangesW
QueryPerformanceCounter
FileTimeToDosDateTime
IsBadStringPtrA
CompareStringA
FindAtomW
GetOEMCP
GetLogicalDriveStringsA
GetShortPathNameA
OpenProcess
GetProcessHeap
GetNamedPipeInfo
GetTimeFormatW
GetAtomNameW
lstrlenW
GlobalDeleteAtom
ExpandEnvironmentStringsW
GetFileTime
GetProcAddress
OpenFile
GetDiskFreeSpaceA
SetThreadPriority
GetExpandedNameA
CreateMailslotW
EnumTimeFormatsA

user32

SetWindowLongA
CallWindowProcW
UpdateWindow
DefWindowProcW
GetKeyboardType
DrawIcon
ShowWindow
RegisterClassW
SetTimer
LoadMenuA
GetFocus
GetClassLongW
SetDlgItemTextA
SetCursor
InsertMenuW
RegisterWindowMessageW
LoadMenuW
GetMenuItemID
wsprintfA
wsprintfW
IsMenu
SendMessageW
DefFrameProcW
FrameRect
CreateDialogIndirectParamW
WaitForInputIdle
GetDC
LoadImageW
MessageBoxA

gdi32

CombineRgn
FloodFill
GetTextExtentPointW
CreatePalette
BeginPath
GetGraphicsMode
CreateICW
GetTextCharset
SetRectRgn
GetDCBrushColor

advapi32

RegOpenKeyExW
RegQueryInfoKeyW
RegCloseKey
RegQueryValueW
RegDeleteKeyW
RegRestoreKeyW

ws2_32

getservbyport

winspool.drv

PerfCollect
AddPrinterConnectionW
XcvDataW
AddFormA
DeleteFormW
EnumMonitorsA
DeviceCapabilities
SpoolerPrinterEvent

Sections

.jDxvQ
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bX
Size: 3KB - Virtual size: 198KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.Kk
Size: 3KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.HwXr
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.PGje
Size: 4KB - Virtual size: 188KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 170KB - Virtual size: 169KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 960B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d14e22ee5de0cc56f4e8bdee1753465a

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

ws2_32

winspool.drv

Sections

.jDxvQ Size: 10KB - Virtual size: 10KB

.bX Size: 3KB - Virtual size: 198KB

.Kk Size: 3KB - Virtual size: 22KB

.HwXr Size: 11KB - Virtual size: 10KB

.PGje Size: 4KB - Virtual size: 188KB

.rsrc Size: 170KB - Virtual size: 169KB

.reloc Size: 1024B - Virtual size: 960B

.jDxvQ
Size: 10KB - Virtual size: 10KB

.bX
Size: 3KB - Virtual size: 198KB

.Kk
Size: 3KB - Virtual size: 22KB

.HwXr
Size: 11KB - Virtual size: 10KB

.PGje
Size: 4KB - Virtual size: 188KB

.rsrc
Size: 170KB - Virtual size: 169KB

.reloc
Size: 1024B - Virtual size: 960B