94d9ac9fb462100f3e826f9ebdcaf8fb_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

94d9ac9fb462100f3e826f9ebdcaf8fb_JaffaCakes118
Size

160KB
MD5

94d9ac9fb462100f3e826f9ebdcaf8fb
SHA1

cf71602880261ef32bb7446b560d1715d860c590
SHA256

7e110cc6d8b66f2c2b353176035b841ca4da46e9a20fefbac96be7bae21c5e75
SHA512

9daabf5d0c8bca472faaf4afa8aba530c90dadaf7d19cd68cb52f71f5d3da4b6ce482e2ba2f11c8a3b40b86208715e9ab21bb6fba3f2957f9f653e98c05dd438
SSDEEP

3072:bxNZ0Vnj233nNjVNVDnKdCal5Ojy+UR0kDJo+Zn4FxeY+RH9stacxN5YoiF+:bPGn6nj2IcYp2dh42Y+vAaIioiF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
94d9ac9fb462100f3e826f9ebdcaf8fb_JaffaCakes118

Files

94d9ac9fb462100f3e826f9ebdcaf8fb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c6cd40ec17849d797804611435e88d69

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetCurrentProcessId
LockResource
GetCPInfo
FindResourceW
FlushInstructionCache
GetDriveTypeW
MulDiv
LoadResource
LocalFree
CreateFileMappingW
GetStringTypeA
lstrcpynW
SetFilePointer
GetLocaleInfoA
GetConsoleCP
LCMapStringA
SetUnhandledExceptionFilter
QueryPerformanceCounter
Sleep
GetCurrentThreadId
SetStdHandle
GetOEMCP
RaiseException
TlsAlloc
CheckRemoteDebuggerPresent
FlushFileBuffers
CreateSemaphoreW
GetConsoleOutputCP
WaitForSingleObject
GetACP
SetLastError
WriteConsoleA
HeapCreate
CopyFileW
EnumResourceTypesW
GetVersion
VirtualAlloc
TlsGetValue
LoadLibraryA
InterlockedExchange
WriteConsoleW
HeapDestroy
TlsFree
HeapSize
SizeofResource
CreateFileA
GetStartupInfoA
InterlockedCompareExchange
lstrlenA
InitializeCriticalSection
LCMapStringW
lstrcmpA
LocalAlloc
GetCurrentProcess
TlsSetValue
GetConsoleMode
GetTickCount
IsDebuggerPresent
GetThreadLocale
GetSystemTimeAsFileTime
GetStringTypeW
LeaveCriticalSection
WritePrivateProfileSectionW
IsProcessorFeaturePresent
WideCharToMultiByte
VirtualFree
GetFileType

winspool.drv

DocumentPropertiesW

user32

MessageBoxW
SetCapture
EndPaint
SetWindowPos
SetDlgItemTextW
GetAncestor
GetClassInfoExW
SystemParametersInfoW
BeginPaint
GetWindowTextLengthW
LoadCursorW
DestroyWindow
GetWindow
GetWindowInfo
GetClientRect
GetWindowRect
PeekMessageW
SetWindowTextW
MapWindowPoints
RegisterClassExW
DispatchMessageW
TranslateMessage
GetParent
GetDC
CreateWindowExW
GetDlgItemTextW
EndDialog

Sections

.text
Size: 107KB - Virtual size: 106KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 49KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.isete
Size: 1024B - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c6cd40ec17849d797804611435e88d69

Headers

File Characteristics

Imports

kernel32

winspool.drv

user32

Sections

.text Size: 107KB - Virtual size: 106KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 49KB - Virtual size: 48KB

.isete Size: 1024B - Virtual size: 96KB

.text
Size: 107KB - Virtual size: 106KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 49KB - Virtual size: 48KB

.isete
Size: 1024B - Virtual size: 96KB