a26fdabde596fab6f75a8a94047c4079_JaffaCakes118

General

Target

a26fdabde596fab6f75a8a94047c4079_JaffaCakes118
Size

333KB
MD5

a26fdabde596fab6f75a8a94047c4079
SHA1

8b7d8f4ded8d05405d5906bd5bf3426d83643201
SHA256

e22e28f15e64fcce5549ba8e2c25b940f940c54ea971c5b59ddfdf1e6bcc7690
SHA512

1c032bdc16c9c40848d70b59a8b606a324e4f93599ddce8b6bcb5a307230570ba861d769ccb1b276d50d18bd42d9894ad81f56e32865d46e2ec7fd9279ca1c11
SSDEEP

6144:oWP36UxpJ7lvg+IcyC3KfmIepb4qV9F4w2ZY7BZ9/93JMxnIc:oWPKU5lv1kQdIObnV9FPPd0xnI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a26fdabde596fab6f75a8a94047c4079_JaffaCakes118

Files

a26fdabde596fab6f75a8a94047c4079_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6cc89b68fdafa31a2772cb22da2ce34c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

StgOpenPropStg
CoRegisterSurrogate

advapi32

RegQueryValueA
RegOpenKeyExA
RegCreateKeyA
RegQueryMultipleValuesA
RegEnumKeyA
RegSetValueExA
RegNotifyChangeKeyValue

kernel32

GetModuleHandleA
GetStdHandle
GetProfileIntA
WriteProfileStringA
GetProcAddress
CreateSemaphoreA
GetModuleFileNameA
OpenEventA
GetProcessHeap
GetEnvironmentVariableA
GlobalHandle
GlobalReAlloc
GetCommandLineA
IsBadCodePtr
SuspendThread
VirtualAlloc
OpenSemaphoreA
GlobalLock
FreeEnvironmentStringsA
ReleaseSemaphore
GetEnvironmentStrings
GetStartupInfoA
LCMapStringA
ReleaseMutex

winspool.drv

AddPrinterA
AdvancedDocumentPropertiesA
AbortPrinter
AddFormA
DeletePrinter
DeleteFormA
DeletePrinterKeyA

msvcrt

__getmainargs
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
_exit
_XcptFilter
exit
_acmdln
__setusermatherr
_initterm

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 314KB - Virtual size: 313KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 93KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6cc89b68fdafa31a2772cb22da2ce34c

Headers

File Characteristics

Imports

ole32

advapi32

kernel32

winspool.drv

msvcrt

Sections

.text Size: 12KB - Virtual size: 12KB

.rdata Size: 314KB - Virtual size: 313KB

.data Size: 512B - Virtual size: 93KB

.rsrc Size: 5KB - Virtual size: 5KB

.text
Size: 12KB - Virtual size: 12KB

.rdata
Size: 314KB - Virtual size: 313KB

.data
Size: 512B - Virtual size: 93KB

.rsrc
Size: 5KB - Virtual size: 5KB