88aa252e5759e70b52e8adf9f98934d2_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

88aa252e5759e70b52e8adf9f98934d2_JaffaCakes118
Size

213KB
MD5

88aa252e5759e70b52e8adf9f98934d2
SHA1

cea2057896dd24c99106d2e71b07ed9ffacf12a7
SHA256

2f33fea4d9fa351124cfdd91aca816f25a83050dee38ebff177e9d4b8fc8e1a6
SHA512

e6fb606c0082b3863cd9c4db8193863bcf0fddc5823ec9c7418736242df6bfa19d410c7f18e0dc1254339aab3bf4a539777bf1503b73749b66ce7fcffcf260f9
SSDEEP

6144:HN+TNmQ1J+tl7OwGWvv6I4RLgup5306QL1:tedQ64vqg606G1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
88aa252e5759e70b52e8adf9f98934d2_JaffaCakes118

Files

88aa252e5759e70b52e8adf9f98934d2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

372a13aa4befcecafec3dc399cc203fd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

OpenSemaphoreA
GetDiskFreeSpaceA
GetProcAddress
GetNamedPipeInfo
InitializeCriticalSection
MulDiv
DosDateTimeToFileTime
GetTempFileNameA
OpenMutexW
CreateEventA
GetLongPathNameW
OpenFile
GetACP
EnumDateFormatsA
GetCurrentProcessId
CreateMailslotW
GetSystemDirectoryA
CopyFileA
ExpandEnvironmentStringsA
GetStartupInfoA
GetLocaleInfoA
GetStartupInfoW
GlobalGetAtomNameW
GetUserDefaultLangID
GetPriorityClass
SetCalendarInfoW
FlushFileBuffers
GetEnvironmentVariableW
LocalAlloc
EnumTimeFormatsA
CompareStringA
GetSystemDirectoryW
ExpandEnvironmentStringsW
GetNumberFormatW
Beep
FindResourceA
GetCommandLineA
GetLocaleInfoW
GetCalendarInfoW
FileTimeToDosDateTime
LocalFree
WaitForMultipleObjects
GetModuleHandleA
SetComputerNameW
IsBadStringPtrW
ConnectNamedPipe
GetThreadPriority
GlobalFindAtomA
CreateFileA
GetSystemDefaultLCID
FreeResource
FindResourceW
ReadFile
GlobalDeleteAtom
GlobalGetAtomNameA
GetComputerNameA
GetCPInfo

user32

SendDlgItemMessageA
IsDlgButtonChecked
TrackPopupMenu
SendMessageW
ActivateKeyboardLayout
PostMessageW
SetWindowPos
LoadImageA
CreateAcceleratorTableW
GetMessageW
SendDlgItemMessageW
EnableMenuItem
GetKeyboardType
wsprintfA
LoadIconW
ReleaseDC
WinHelpA
LoadIconA
EmptyClipboard

gdi32

CreateDCA
GetCharWidth32W
SaveDC
ExtTextOutW
GetCharWidthFloatW
SetDCBrushColor
ColorMatchToTarget
LineTo
SetArcDirection
CreateSolidBrush
GetTextExtentExPointW
SetRectRgn
CreateFontIndirectExW

advapi32

RegEnumValueA
RegDeleteKeyA
RegOpenKeyExA
RegOpenKeyExA
RegOpenKeyExW
RegDeleteValueA

comctl32

ImageList_SetFlags
CreateToolbarEx

ws2_32

WSAEnumProtocolsW
recvfrom
bind
getservbyname
ioctlsocket
gethostbyname
closesocket
WSAGetLastError
setsockopt

winmm

joyGetNumDevs
mciSendCommandA

winspool.drv

GetPrinterDataExA
WaitForPrinterChange
AddPrinterDriverW
OpenPrinterA
DeletePrinterDriverW
AddJobA
AddPortExA
GetPrinterDriverDirectoryW
AddPrintProcessorA

inetcomm

MimeOleObjectFromMoniker
HrDoAttachmentVerb
CreateRASTransport
MimeOleGetFileInfoW
MimeOleParseRfc822AddressW
MimeOleGetCodePageCharset
MimeOleSMimeCapAddCert
EssReceiptRequestEncodeEx
MimeOleCreateByteStream
MimeOleGenerateMID
MimeOleSetBodyPropA
MimeOleGetPropW
MimeOleFindCharset
CreatePOP3Transport
EssReceiptEncodeEx
MimeOleGetInternat
HrGetLastOpenFileDirectory
GetDllMajorVersion
MimeOleGetFileInfo

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.N
Size: 2KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.M
Size: 1KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.aAUTTF
Size: 512B - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.p
Size: 4KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ZWQggJ
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.T
Size: 1024B - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ggLoS
Size: 1024B - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nfiGB
Size: 2KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.LlPz
Size: 2KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tyy
Size: 512B - Virtual size: 173KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 169KB - Virtual size: 168KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

372a13aa4befcecafec3dc399cc203fd

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

comctl32

ws2_32

winmm

winspool.drv

inetcomm

Sections

.text Size: 11KB - Virtual size: 11KB

.N Size: 2KB - Virtual size: 45KB

.M Size: 1KB - Virtual size: 24KB

.aAUTTF Size: 512B - Virtual size: 7KB

.p Size: 4KB - Virtual size: 37KB

.ZWQggJ Size: 512B - Virtual size: 1KB

.T Size: 1024B - Virtual size: 24KB

.ggLoS Size: 1024B - Virtual size: 26KB

.data Size: 15KB - Virtual size: 15KB

.nfiGB Size: 2KB - Virtual size: 20KB

.LlPz Size: 2KB - Virtual size: 5KB

.tyy Size: 512B - Virtual size: 173KB

.rsrc Size: 169KB - Virtual size: 168KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 11KB - Virtual size: 11KB

.N
Size: 2KB - Virtual size: 45KB

.M
Size: 1KB - Virtual size: 24KB

.aAUTTF
Size: 512B - Virtual size: 7KB

.p
Size: 4KB - Virtual size: 37KB

.ZWQggJ
Size: 512B - Virtual size: 1KB

.T
Size: 1024B - Virtual size: 24KB

.ggLoS
Size: 1024B - Virtual size: 26KB

.data
Size: 15KB - Virtual size: 15KB

.nfiGB
Size: 2KB - Virtual size: 20KB

.LlPz
Size: 2KB - Virtual size: 5KB

.tyy
Size: 512B - Virtual size: 173KB

.rsrc
Size: 169KB - Virtual size: 168KB

.reloc
Size: 1KB - Virtual size: 1KB