8b951b798f8a988cf7ceba7cab8e5b80_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

8b951b798f8a988cf7ceba7cab8e5b80_JaffaCakes118
Size

204KB
MD5

8b951b798f8a988cf7ceba7cab8e5b80
SHA1

8e74a0cd88f4ecc99d7eb66e2e1bfc5bba3e13a8
SHA256

8d36ef1f332deebcc4ee12bb3e99709c3f137d01bf1701a04d7aa9f0fe5b1d58
SHA512

d50096e36d9787f314473ae5e397dec1e2edc153be2b42dc426c7d4b3536d32059d06240fd174e79aa0d1fbc0b050e731a529f8931dc9e0ae289ec4cc7569590
SSDEEP

6144:rveY2TNgrT9xrb4KgGiB7z/a9Qrtgq7Kfca:rkhAT9xn4KgGiB7bS8tzu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8b951b798f8a988cf7ceba7cab8e5b80_JaffaCakes118

Files

8b951b798f8a988cf7ceba7cab8e5b80_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d14e22ee5de0cc56f4e8bdee1753465a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DosDateTimeToFileTime
RaiseException
GetDiskFreeSpaceW
GetWindowsDirectoryA
SetErrorMode
ReplaceFileA
SetComputerNameW
GetLongPathNameA
CreateDirectoryA
OpenWaitableTimerA
GetModuleHandleA
CreateMutexW
ExitProcess
CreateMailslotA
ReadDirectoryChangesW
QueryPerformanceCounter
FileTimeToDosDateTime
IsBadStringPtrA
CompareStringA
FindAtomW
GetOEMCP
GetLogicalDriveStringsA
GetShortPathNameA
OpenProcess
GetProcessHeap
GetNamedPipeInfo
GetTimeFormatW
GetAtomNameW
lstrlenW
GlobalDeleteAtom
ExpandEnvironmentStringsW
GetFileTime
GetProcAddress
OpenFile
GetDiskFreeSpaceA
SetThreadPriority
GetExpandedNameA
CreateMailslotW
EnumTimeFormatsA

user32

SetWindowLongA
CallWindowProcW
UpdateWindow
DefWindowProcW
GetKeyboardType
DrawIcon
ShowWindow
RegisterClassW
SetTimer
LoadMenuA
GetFocus
GetClassLongW
SetDlgItemTextA
SetCursor
InsertMenuW
RegisterWindowMessageW
LoadMenuW
GetMenuItemID
wsprintfA
wsprintfW
IsMenu
SendMessageW
DefFrameProcW
FrameRect
CreateDialogIndirectParamW
WaitForInputIdle
GetDC
LoadImageW
MessageBoxA

gdi32

CombineRgn
FloodFill
GetTextExtentPointW
CreatePalette
BeginPath
GetGraphicsMode
CreateICW
GetTextCharset
SetRectRgn
GetDCBrushColor

advapi32

RegOpenKeyExW
RegQueryInfoKeyW
RegCloseKey
RegQueryValueW
RegDeleteKeyW
RegRestoreKeyW

ws2_32

getservbyport

winspool.drv

PerfCollect
AddPrinterConnectionW
XcvDataW
AddFormA
DeleteFormW
EnumMonitorsA
DeviceCapabilities
SpoolerPrinterEvent

Sections

.jDxvQ
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bX
Size: 3KB - Virtual size: 198KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.Kk
Size: 3KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.HwXr
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.PGje
Size: 4KB - Virtual size: 188KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 170KB - Virtual size: 169KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 960B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d14e22ee5de0cc56f4e8bdee1753465a

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

ws2_32

winspool.drv

Sections

.jDxvQ Size: 10KB - Virtual size: 10KB

.bX Size: 3KB - Virtual size: 198KB

.Kk Size: 3KB - Virtual size: 22KB

.HwXr Size: 11KB - Virtual size: 10KB

.PGje Size: 4KB - Virtual size: 188KB

.rsrc Size: 170KB - Virtual size: 169KB

.reloc Size: 1024B - Virtual size: 960B

.jDxvQ
Size: 10KB - Virtual size: 10KB

.bX
Size: 3KB - Virtual size: 198KB

.Kk
Size: 3KB - Virtual size: 22KB

.HwXr
Size: 11KB - Virtual size: 10KB

.PGje
Size: 4KB - Virtual size: 188KB

.rsrc
Size: 170KB - Virtual size: 169KB

.reloc
Size: 1024B - Virtual size: 960B