a6c9c5c4eae60cd4758d5170a3a22134_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

a6c9c5c4eae60cd4758d5170a3a22134_JaffaCakes118
Size

239KB
MD5

a6c9c5c4eae60cd4758d5170a3a22134
SHA1

ad05eb39a2e5b52a759739c0167560a6e422224c
SHA256

5ddf234991a79008736975e6591ba719c1e1bc31547511aed88fa77fb91eba9c
SHA512

beb18cdddb7cc9d47ec292d73af87b90b91bf577d2ea5b4c7e62c7a311b4f7590e9449dd7e623d659c63b51b717c95cde21e2f965d455ac01e30bce3d2695e98
SSDEEP

6144:uIAG57uQTpkpWsJYu+OR7BpriXqbKg9AMJCx:uIj1FWN1+oeGg5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a6c9c5c4eae60cd4758d5170a3a22134_JaffaCakes118

Files

a6c9c5c4eae60cd4758d5170a3a22134_JaffaCakes118
.exe windows:4 windows x86 arch:x86

63a1cb4484bdd6a461f48b8c91c502d2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

CoCreateGuid
StringFromGUID2
CoUninitialize
CoInitialize

advapi32

RegCloseKey
RegSetValueExW
RegOpenKeyExW

kernel32

LeaveCriticalSection
GetCurrentThreadId
WritePrivateProfileStringW
IsDebuggerPresent
DeleteCriticalSection
GetSystemTimeAsFileTime
UnhandledExceptionFilter
EnterCriticalSection
GetPrivateProfileStringW
SetUnhandledExceptionFilter
GetPrivateProfileSectionW
GetStartupInfoW
VirtualAllocEx

user32

LoadStringW

mscms

CreateProfileFromLogColorSpaceW
UnregisterCMMW
GetStandardColorSpaceProfileA
RegisterCMMA
InternalGetPS2ColorSpaceArray
GetColorProfileFromHandle
SelectCMM
CreateDeviceLinkProfile

stclient

DllGetClassObject

Sections

.text
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.LFXtPI
Size: 512B - Virtual size: 222B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.KnGQ
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gX
Size: 512B - Virtual size: 712B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ITK
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.qmaMjr
Size: 512B - Virtual size: 254B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.OXd
Size: 512B - Virtual size: 755B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 212KB - Virtual size: 280KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 924B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

63a1cb4484bdd6a461f48b8c91c502d2

Headers

DLL Characteristics

File Characteristics

Imports

ole32

advapi32

kernel32

user32

mscms

stclient

Sections

.text Size: 17KB - Virtual size: 17KB

.LFXtPI Size: 512B - Virtual size: 222B

.KnGQ Size: 1KB - Virtual size: 1KB

.gX Size: 512B - Virtual size: 712B

.rdata Size: 1KB - Virtual size: 1KB

.ITK Size: 2KB - Virtual size: 1KB

.qmaMjr Size: 512B - Virtual size: 254B

.OXd Size: 512B - Virtual size: 755B

.data Size: 212KB - Virtual size: 280KB

.rsrc Size: 1024B - Virtual size: 924B

.text
Size: 17KB - Virtual size: 17KB

.LFXtPI
Size: 512B - Virtual size: 222B

.KnGQ
Size: 1KB - Virtual size: 1KB

.gX
Size: 512B - Virtual size: 712B

.rdata
Size: 1KB - Virtual size: 1KB

.ITK
Size: 2KB - Virtual size: 1KB

.qmaMjr
Size: 512B - Virtual size: 254B

.OXd
Size: 512B - Virtual size: 755B

.data
Size: 212KB - Virtual size: 280KB

.rsrc
Size: 1024B - Virtual size: 924B