8de763705d6aa896ab87c95adeca7be8_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

8de763705d6aa896ab87c95adeca7be8_JaffaCakes118
Size

369KB
MD5

8de763705d6aa896ab87c95adeca7be8
SHA1

d01a5bb42aefd67529d58de4aaa96664c01117ae
SHA256

60f71ae56ea5a0d49e5365cd516ef36caf1d07f086ffc052a64432363dcd0fe1
SHA512

c0d1b93b1a5ff38499f8e7dacc1374b64f7c1425f55dc048d693e8715f1dbf915dd5ce76b1b0ec84ca9b4936187d3a1db628d3fdd46fd327fcafd357ae84cb3d
SSDEEP

6144:INmDB8I/GnZFds3M6nvAObxr+Hd+d8w9yoDjPJHtZxREJa+/2K49A5c7WByoHBNp:d6pnls3M6nvAK+HAyYV7xmt/2c5bHB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8de763705d6aa896ab87c95adeca7be8_JaffaCakes118

Files

8de763705d6aa896ab87c95adeca7be8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

eb86adb213827388264f84ff71d30da6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

LoadIconA
GetWindow
GetDlgItemInt
GetWindowTextLengthA
CascadeWindows
SetDlgItemTextA
DialogBoxParamA
GetDesktopWindow
BeginDeferWindowPos
WindowFromPoint
MessageBoxIndirectA

gdi32

DrawEscape
CreateDCA
EnumObjects
FloodFill
CopyMetaFileW
Escape
CombineTransform
EndPage
CancelDC
CopyMetaFileA
Chord
ExtFloodFill

advapi32

AdjustTokenPrivileges
NotifyChangeEventLog
RegFlushKey
RegOpenKeyA
RegDeleteValueA

kernel32

GetLastError
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetStringTypeW
GlobalUnlock
LocalSize
GetNumberFormatA
HeapAlloc
SetLocaleInfoA
IsValidCodePage
HeapUnlock
IsBadStringPtrA
GetThreadLocale
FoldStringA
IsBadWritePtr
VirtualAllocEx
WaitForMultipleObjects
GetOverlappedResult
LCMapStringA
GetPrivateProfileStructA
GetPrivateProfileSectionNamesA
GetProfileIntA
GetProcAddress
GetHandleInformation
GetStringTypeA
LCMapStringW
MultiByteToWideChar
LoadLibraryA
HeapReAlloc
VirtualAlloc
GetOEMCP
GetACP
TlsGetValue
GetCPInfo
SetLastError
TlsAlloc
TlsSetValue
GetCurrentThreadId
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW

winspool.drv

DeletePrinterConnectionA
AddFormA
GetJobA
EnumPrinterDriversA
EnumPrinterDriversW
GetPrinterA
AddPrinterConnectionA
DeletePrinterDriverExW
DeleteFormA

netapi32

NetUseEnum
NetGetJoinInformation
NetConfigGet
NetGroupAddUser
NetFileClose
NetGroupAdd
NetGetDCName
NetErrorLogRead
NetAuditWrite
NetConfigSet
NetErrorLogWrite

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 81KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.dngnl
Size: 331KB - Virtual size: 330KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

eb86adb213827388264f84ff71d30da6

Headers

File Characteristics

Imports

user32

gdi32

advapi32

kernel32

winspool.drv

netapi32

Sections

.text Size: 28KB - Virtual size: 27KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 2KB - Virtual size: 81KB

.dngnl Size: 331KB - Virtual size: 330KB

.rsrc Size: 3KB - Virtual size: 2KB

.text
Size: 28KB - Virtual size: 27KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 2KB - Virtual size: 81KB

.dngnl
Size: 331KB - Virtual size: 330KB

.rsrc
Size: 3KB - Virtual size: 2KB