69dc44e5d18b2320488e1a82559ecb59_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

69dc44e5d18b2320488e1a82559ecb59_JaffaCakes118
Size

108KB
MD5

69dc44e5d18b2320488e1a82559ecb59
SHA1

7f8cf30e09fc557d8269509f040cce0c9ed2c3c0
SHA256

c1743cc8a0b341d218cf012ec2619eb2ead00c7b1ee7233e2945c0458e6908c3
SHA512

5dbf3db16eebd0cefdfbb58409dd1b3c94f0ba7811e8b66cc3591f3e85d17c236d6a0053f430d312bedb54fc9b1a7721867fc5c38762e681f4098879e6aa0f9c
SSDEEP

1536:Phy4AkA825fKYn8+oXWMUOsIXINf3GtbSh4CDG8IHiTWzXbfJJOYn/u0f:PhC188L8+oNUqY4t58jTWPf7nlf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
69dc44e5d18b2320488e1a82559ecb59_JaffaCakes118

Files

69dc44e5d18b2320488e1a82559ecb59_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5a095a0744af474c6dcbb46897f5897e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalUnlock
lstrcpyA
lstrcpynA
lstrcmpiA
GlobalLock
GlobalAlloc
GetLastError
GetPrivateProfileStringA
GetTempPathA
DeleteFileA
CreateProcessA
GetSystemDirectoryA
GetStartupInfoA
WriteProfileStringA
HeapFree
HeapAlloc
GetProcessHeap
GetVersionExA
GlobalFree
GetWindowsDirectoryA
FindClose
FindNextFileA
SetFileAttributesA
FindFirstFileA
FreeLibrary
GetProcAddress
LoadLibraryA
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
HeapReAlloc
VirtualAlloc
GetStringTypeW
GetOEMCP
Sleep
CreateThread
WaitForSingleObject
CloseHandle
WritePrivateProfileStringA
lstrlenA
GetModuleHandleA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
RtlUnwind
WriteFile
GetCPInfo
GetACP

user32

SendMessageTimeoutA
wsprintfA

winspool.drv

EnumPrintersA
SetPrinterA
ClosePrinter
GetPrinterA
OpenPrinterA

advapi32

RegOpenKeyExA
RegQueryValueExA
RegSetValueExA
RegCloseKey
RegDeleteValueA

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 80KB - Virtual size: 108KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

lvstpxs
Size: - Virtual size: 104KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

jpjosus
Size: - Virtual size: 84KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

5a095a0744af474c6dcbb46897f5897e

Headers

File Characteristics

Imports

kernel32

user32

winspool.drv

advapi32

Sections

.text Size: 20KB - Virtual size: 19KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 80KB - Virtual size: 108KB

lvstpxs Size: - Virtual size: 104KB

jpjosus Size: - Virtual size: 84KB

.text
Size: 20KB - Virtual size: 19KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 80KB - Virtual size: 108KB

lvstpxs
Size: - Virtual size: 104KB

jpjosus
Size: - Virtual size: 84KB