68aaff996ee5b44be4601dd5b8ae15dd_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

68aaff996ee5b44be4601dd5b8ae15dd_JaffaCakes118
Size

369KB
MD5

68aaff996ee5b44be4601dd5b8ae15dd
SHA1

0554680e2d2efc777de219bd1fd3c8437f48196f
SHA256

e07565e6cf88ff9f448d2cff3d818547c1653746398b063ba2007518f4cad02b
SHA512

cbdb90acc56ea5d1d62b4b86ddab6ccb96f48335bb9e3d142801e56699c651ae085a277297fa6d741ef7b538813d053b9da01697bc9c4a9da737a6727038ea52
SSDEEP

6144:3R3UJr1Z6JIJF77sVeMRv6mQRtni7NP5raVXlMwvGK8/0Rk+sQd80bQKG65nz84:VUzsm4BgRORWVXlMg8/1+5xbQ96tZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
68aaff996ee5b44be4601dd5b8ae15dd_JaffaCakes118

Files

68aaff996ee5b44be4601dd5b8ae15dd_JaffaCakes118
.exe windows:4 windows x86 arch:x86

62b7aa9691ed9b1b1355fcd9541a40a0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

AdjustWindowRect
DefDlgProcA
DeferWindowPos
GetWindowRect
EnumThreadWindows
GetNextDlgGroupItem
ChildWindowFromPoint
ArrangeIconicWindows
IsDialogMessageA
MoveWindow
BringWindowToTop
FindWindowA
LoadIconA

gdi32

Chord
Arc
EnumObjects
GetBrushOrgEx
CloseEnhMetaFile
ExtEscape
EqualRgn
AngleArc
CreateFontA
AddFontResourceA
DescribePixelFormat
CopyEnhMetaFileW
CopyEnhMetaFileA

advapi32

BackupEventLogA
RegReplaceKeyA
RegOpenKeyExA
OpenEventLogW
ReadEventLogA

kernel32

SetLastError
TlsGetValue
GetLastError
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
LeaveCriticalSection
GetCPInfo
GetStringTypeW
WaitForSingleObject
GlobalFlags
GetTimeFormatA
GetThreadLocale
IsBadWritePtr
EnterCriticalSection
InitializeCriticalSection
ReleaseSemaphore
HeapValidate
GetACP
WriteProfileStringA
GetProfileIntA
GetProcAddress
GetHandleInformation
VirtualAllocEx
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
LoadLibraryA
HeapReAlloc
VirtualAlloc
HeapAlloc
TlsAlloc
TlsSetValue
GetCurrentThreadId
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetOEMCP

winspool.drv

DeletePrinterDriverExA
ConnectToPrinterDlg
EnumJobsW
GetPrinterDriverW
GetPrinterDriverA
AddPrinterConnectionA
SetPrinterA
AbortPrinter

netapi32

NetUserAdd
NetLocalGroupDelMembers
NetConnectionEnum
NetGroupAdd
NetConfigSet
NetGetJoinInformation
NetAuditClear
NetFileGetInfo
NetAuditWrite

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 81KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rkn
Size: 331KB - Virtual size: 330KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

62b7aa9691ed9b1b1355fcd9541a40a0

Headers

File Characteristics

Imports

user32

gdi32

advapi32

kernel32

winspool.drv

netapi32

Sections

.text Size: 28KB - Virtual size: 27KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 2KB - Virtual size: 81KB

.rkn Size: 331KB - Virtual size: 330KB

.rsrc Size: 3KB - Virtual size: 2KB

.text
Size: 28KB - Virtual size: 27KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 2KB - Virtual size: 81KB

.rkn
Size: 331KB - Virtual size: 330KB

.rsrc
Size: 3KB - Virtual size: 2KB