b934e442988b7f12b0b925fba31787c4_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

b934e442988b7f12b0b925fba31787c4_JaffaCakes118
Size

699KB
MD5

b934e442988b7f12b0b925fba31787c4
SHA1

91611d954a3116fe47a36e127c79d1eba3996b2b
SHA256

958bd7bf6d47f4c4cbadcc195626602015b99812617b5439ab2802d41ee6a8d7
SHA512

71b01b889454e0d7e927f2b8a1da1211c5b9dbd75bcbe40088a56c117d1a3cb5f912d7e5c201120a520868b88f82293eb50026f00fbe08e05e70bdd547859a13
SSDEEP

12288:e0KSndCc9czf4HUuEAJmoZb/aV1vb9iRp76D943IAyXZPwLZ:FK0dczfoUupJgbGID94YAqZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b934e442988b7f12b0b925fba31787c4_JaffaCakes118

Files

b934e442988b7f12b0b925fba31787c4_JaffaCakes118
.exe windows:5 windows x86 arch:x86

ae5d6c57b6a9d3520f439829f58f8bac

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

crypt32

CryptUnprotectData

version

GetFileVersionInfoSizeW

user32

SetCursorPos

gdi32

PtVisible

msimg32

TransparentBlt

comdlg32

GetFileTitleA

winspool.drv

OpenPrinterA

advapi32

CryptGenRandom

shell32

SHGetPathFromIDListA

comctl32

InitCommonControlsEx

shlwapi

PathRemoveFileSpecW

ole32

CreateStreamOnHGlobal

oleaut32

SafeArrayUnaccessData

oledlg

ord8

oleacc

ObjectFromLresult

gdiplus

GdipCreateBitmapFromStream

imm32

ImmReleaseContext

winmm

PlaySoundA

Sections

.text
Size: 684KB - Virtual size: 2.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 13KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

ae5d6c57b6a9d3520f439829f58f8bac

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

crypt32

version

user32

gdi32

msimg32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

ole32

oleaut32

oledlg

oleacc

gdiplus

imm32

winmm

Sections

.text Size: 684KB - Virtual size: 2.0MB

.rsrc Size: 13KB - Virtual size: 16KB

.reloc Size: 512B - Virtual size: 512B

.text
Size: 684KB - Virtual size: 2.0MB

.rsrc
Size: 13KB - Virtual size: 16KB

.reloc
Size: 512B - Virtual size: 512B