73c591d5c4f36f85940251b8c84133cc_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

73c591d5c4f36f85940251b8c84133cc_JaffaCakes118
Size

1.2MB
MD5

73c591d5c4f36f85940251b8c84133cc
SHA1

72c9b6101cd0d625100e0eedf45e5f6dcddf7524
SHA256

228986aed5fa0b4cf751f1e4f33415805a9e14927609ce05d26c82910114e166
SHA512

b3b821a5be576744a5db277f4a0e7bba9440707b133865dc3634bb660a262edf22280603a82b545502bff1e0c2c045454e6132f8d5ac2fa1907ddd9ade22b5e6
SSDEEP

24576:5EFNvzt1BeVy9DwKdG/HkmXR/VkhlkxPmFxXEbxxLw19+TPnMYCJ2MO:SUy+iG/rR/VkhgPmFpE1x8O0Yh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
73c591d5c4f36f85940251b8c84133cc_JaffaCakes118

Files

73c591d5c4f36f85940251b8c84133cc_JaffaCakes118
.exe windows:5 windows x86 arch:x86

cef987264b8ec279b4d40b772e5d3afe

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetSystemCursor
IsDlgButtonChecked
DrawIcon
ChildWindowFromPoint
AppendMenuA
GetMenuDefaultItem
KillTimer
CharUpperA
SetWindowContextHelpId
GetParent
GetUserObjectInformationA
EqualRect
GetWindow

msvcrt

fwprintf
mktime
fgetc
_vsnprintf
fscanf
realloc

winspool.drv

OpenPrinterW

kernel32

GetLastError
GetProfileIntA
GetModuleHandleA
DeleteFileA
FindResourceA
GetModuleHandleW
GetSystemDirectoryA
lstrcatA
RemoveDirectoryA

gdi32

SetPolyFillMode
SetWindowOrgEx
IntersectClipRect
GetRgnBox
GetTextMetricsW
CreateSolidBrush
GetStockObject

comdlg32

PageSetupDlgW

Exports

Exports

_Abxpqrpd_ypqhalxiu_v@16
_Cdvmzelp_plfjencjeh@8
_RccFvipwn_qlbomtr@4
_CMoigzfq_mxigxaqF_zk@16
_Cwchkqsz_pfwvrjhosn@16
_Efzlnrjz_mefmirjH_n@4
_Ntmzywvjh_xgnprru_tbd@16
_Ympymroxf_ysoizB@8
_KtBgrqGgH_zgqcylG_ipe@8
_CoHwanpb_nIgkuo@12
_EomdldPb_gkcYtzju@12
_Useujksg_lblJzvvan@8
_FBapurui_rkisfjnn_r@4
_DqgAiZfgk_Lnzbxmo_fm@16
_WwhrqFaz_etnoLaf@12
_Xjnnzbjeb_zotedbhtb@16
_QgqiPvkw_ywhfxxiq_wbd@4

Sections

.icode
Size: - Virtual size: 5.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.vars
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.base
Size: 1024B - Virtual size: 968B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.const
Size: 512B - Virtual size: 258B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

cef987264b8ec279b4d40b772e5d3afe

Headers

DLL Characteristics

File Characteristics

Imports

user32

msvcrt

winspool.drv

kernel32

gdi32

comdlg32

Exports

Exports

Sections

.icode Size: - Virtual size: 5.9MB

.text Size: 37KB - Virtual size: 36KB

.rdata Size: 2KB - Virtual size: 2KB

.vars Size: 2KB - Virtual size: 2KB

.base Size: 1024B - Virtual size: 968B

.data Size: 1024B - Virtual size: 1KB

.const Size: 512B - Virtual size: 258B

.CRT Size: 512B - Virtual size: 8B

.rsrc Size: 1.2MB - Virtual size: 1.2MB

.reloc Size: 5KB - Virtual size: 4KB

.icode
Size: - Virtual size: 5.9MB

.text
Size: 37KB - Virtual size: 36KB

.rdata
Size: 2KB - Virtual size: 2KB

.vars
Size: 2KB - Virtual size: 2KB

.base
Size: 1024B - Virtual size: 968B

.data
Size: 1024B - Virtual size: 1KB

.const
Size: 512B - Virtual size: 258B

.CRT
Size: 512B - Virtual size: 8B

.rsrc
Size: 1.2MB - Virtual size: 1.2MB

.reloc
Size: 5KB - Virtual size: 4KB