ac87038e9029bf64415e3ffbb76897fd_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

ac87038e9029bf64415e3ffbb76897fd_JaffaCakes118
Size

85KB
MD5

ac87038e9029bf64415e3ffbb76897fd
SHA1

e8ccb0ee3aa9f5f4ae70341dd430ec9379ab8143
SHA256

38725f06ce2cc8d81c8b1ca2b75e51b1b69607df85a70af8f4cd95b72fba309c
SHA512

5aaa0c0cfdbc0bfa6126e18dc35d5ccdfe4c0d78e4c1c29ab73f4fdc0c30e9538588d2c3815cccf9a8303f792324ccacf517fce551425f5b54c78744030ae937
SSDEEP

1536:rXUxii+Pqhf+8UPbuSF1OvPsOZhTSADAbCuoHOjgZOymuT17M29yAYgWUvslFhF2:gxEqh2APsOZhuADAb6SgZRmuh7hVUY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ac87038e9029bf64415e3ffbb76897fd_JaffaCakes118

Files

ac87038e9029bf64415e3ffbb76897fd_JaffaCakes118
.exe windows:5 windows x86 arch:x86

9cd95e41f44645ac4aca11d017ffd583

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStartupInfoA
GetSystemTimeAsFileTime
EnumCalendarInfoExA
GetTimeFormatW
GetTickCount
GetExpandedNameW
GetCurrentThreadId
LoadModule
NlsGetCacheUpdateCount
GetSystemDirectoryW
GetCurrentProcessId
GetCPInfoExW
CreateActCtxW
VerifyVersionInfoA
IsProcessInJob
GetUserGeoID
CreateSocketHandle
GetConsoleDisplayMode
DeleteFileW
SetLocalTime
CreateDirectoryExW
GetVolumeInformationA
HeapCreate
GetSystemWow64DirectoryA
QueryPerformanceCounter
VirtualAlloc
GetDiskFreeSpaceExW
SetVolumeLabelA
LoadLibraryA
PurgeComm
GlobalUnlock

esent

JetEnumerateColumns
JetConvertDDL
JetDefragment2
JetSetColumn
JetCreateTableColumnIndex2
JetResetCounter
JetIdle
JetGetLock
JetRetrieveTaggedColumnList
JetSetCurrentIndex
JetGetLS
JetOSSnapshotThaw
JetInit
JetGetInstanceInfo
JetOpenTempTable2
JetStopBackup
JetGetSecondaryIndexBookmark
JetBeginExternalBackup
JetCloseDatabase@12
JetGetTableIndexInfo
JetOpenFileInstance

gdi32

CopyEnhMetaFileW
EngDeletePalette
GetObjectA
SelectFontLocal
GdiConvertAndCheckDC
AddFontMemResourceEx
FONTOBJ_cGetGlyphs
BRUSHOBJ_hGetColorTransform
PathToRegion
EngQueryLocalTime
CreateDIBPatternBrushPt
AnyLinkedFonts
UpdateICMRegKeyW
GdiPlayPrivatePageEMF
GetGlyphIndicesW
DdEntry22
DdEntry23
ModifyWorldTransform
GetMiterLimit
GetTextExtentPoint32A
EudcUnloadLinkW
GdiFullscreenControl
DdEntry4
GdiEndPageEMF
EnumFontFamiliesExW
ExtEscape
GetDeviceCaps
CreateDIBitmap
CloseMetaFile
GetEUDCTimeStamp
CreateEnhMetaFileA
Chord
GetMetaFileW

glmf32

glsContext
glsError
glsReadFunc
glsSwapBuffers
glsGetContexti
glsCommandAPI
glsGetStreamType
glsGetOpcodeCount
glsNumusv
glsULongLow
glsGetCaptureFlags
glsGetLayeri
glsBlock
glsNumul
glsHeaderfv
glsNumus
glsGenContext
glsGetConsti
glsNumui
glsGetStreamReadName
__glsParser_create

Sections

.text
Size: 34KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 17KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 268B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9cd95e41f44645ac4aca11d017ffd583

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

esent

gdi32

glmf32

Sections

.text Size: 34KB - Virtual size: 33KB

.rdata Size: 12KB - Virtual size: 11KB

.data Size: 17KB - Virtual size: 42KB

.rsrc Size: 20KB - Virtual size: 20KB

.reloc Size: 512B - Virtual size: 268B

.text
Size: 34KB - Virtual size: 33KB

.rdata
Size: 12KB - Virtual size: 11KB

.data
Size: 17KB - Virtual size: 42KB

.rsrc
Size: 20KB - Virtual size: 20KB

.reloc
Size: 512B - Virtual size: 268B