8e5c9b617305c857d3c5fcb7699371f9_JaffaCakes118

General

Target

8e5c9b617305c857d3c5fcb7699371f9_JaffaCakes118
Size

335KB
MD5

8e5c9b617305c857d3c5fcb7699371f9
SHA1

4ff8c25a54280da4a0c19b0f48a4e9a3574f354d
SHA256

eff1b2e5b47fe4626996911feeca118724a95229b42e391ded1e5f4093620c48
SHA512

62cfc21bcde25eb6846275fae672c69514cb414a4361cd028f536e1a6574b0df369333484fc1599b44c498c255db43be8bd4e788ac4b60ee3226b699557f5f54
SSDEEP

6144:lXrmtjaZOusd6InNgrfvkVf4siECTW4cGa1IDuyeDwSw3aZ1pBKDNXCeGS8hz:lbmRruWNMXsfmhj2ISyeDw33a6xyeg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8e5c9b617305c857d3c5fcb7699371f9_JaffaCakes118

Files

8e5c9b617305c857d3c5fcb7699371f9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

31a02fdd0f272b2cb0ae6e05c8e9d922

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

CoRegisterClassObject
StgOpenPropStg

advapi32

RegLoadKeyA
RegQueryInfoKeyA
RegFlushKey
RegRestoreKeyA
RegQueryMultipleValuesA
RegSetValueA
RegNotifyChangeKeyValue
RegEnumKeyA
RegCreateKeyA
RegOverridePredefKey
RegCreateKeyExA

kernel32

GetModuleFileNameA
GetCommandLineA
WritePrivateProfileStringA
WritePrivateProfileStructA
WriteProfileStringA
GetProcAddress
VirtualAlloc
ReleaseSemaphore
GetProcessHeap
FreeEnvironmentStringsA
GetEnvironmentVariableA
GetStdHandle
GetStartupInfoA
SuspendThread
ResetEvent
ReleaseMutex
ResumeThread
PulseEvent
OpenEventA
OpenSemaphoreA
GetEnvironmentStrings
GetModuleHandleA
QueryPerformanceCounter
GlobalLock

winspool.drv

DeleteFormA
DeletePrinter
ClosePrinter
DeletePrinterConnectionA
ConnectToPrinterDlg
AdvancedDocumentPropertiesA
ConfigurePortA
DeletePrinterDataA
DeletePrinterKeyA
AddPrinterA
AddFormA

msvcrt

_XcptFilter
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_exit

Sections

.text
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 315KB - Virtual size: 314KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 93KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

31a02fdd0f272b2cb0ae6e05c8e9d922

Headers

File Characteristics

Imports

ole32

advapi32

kernel32

winspool.drv

msvcrt

Sections

.text Size: 13KB - Virtual size: 12KB

.rdata Size: 315KB - Virtual size: 314KB

.data Size: 512B - Virtual size: 93KB

.rsrc Size: 5KB - Virtual size: 5KB

.text
Size: 13KB - Virtual size: 12KB

.rdata
Size: 315KB - Virtual size: 314KB

.data
Size: 512B - Virtual size: 93KB

.rsrc
Size: 5KB - Virtual size: 5KB