ba7e9c01e68362559ffa7fb1589bb988_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

ba7e9c01e68362559ffa7fb1589bb988_JaffaCakes118
Size

239KB
MD5

ba7e9c01e68362559ffa7fb1589bb988
SHA1

328ca475872c9b41cf5bead387900ae9de715423
SHA256

83f620513796870fde453801f9f54a8b30707236cb9d0e55049f390407dc01cb
SHA512

afbed9fbf61f0b2dc86f2102562bde7520f409a7631a6b7e94cb9f64e65cfb781af7a5ac8811e09de0791a8185d7c10a0cfacf24cb3025ba64c082fbc6e9e1c3
SSDEEP

6144:LIAG57uQTpkpWsJYu+OR7BpriXqbKg9AMJCx:LIj1FWN1+oeGg5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ba7e9c01e68362559ffa7fb1589bb988_JaffaCakes118

Files

ba7e9c01e68362559ffa7fb1589bb988_JaffaCakes118
.exe windows:4 windows x86 arch:x86

63a1cb4484bdd6a461f48b8c91c502d2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

CoCreateGuid
StringFromGUID2
CoUninitialize
CoInitialize

advapi32

RegCloseKey
RegSetValueExW
RegOpenKeyExW

kernel32

LeaveCriticalSection
GetCurrentThreadId
WritePrivateProfileStringW
IsDebuggerPresent
DeleteCriticalSection
GetSystemTimeAsFileTime
UnhandledExceptionFilter
EnterCriticalSection
GetPrivateProfileStringW
SetUnhandledExceptionFilter
GetPrivateProfileSectionW
GetStartupInfoW
VirtualAllocEx

user32

LoadStringW

mscms

CreateProfileFromLogColorSpaceW
UnregisterCMMW
GetStandardColorSpaceProfileA
RegisterCMMA
InternalGetPS2ColorSpaceArray
GetColorProfileFromHandle
SelectCMM
CreateDeviceLinkProfile

stclient

DllGetClassObject

Sections

.text
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.LFXtPI
Size: 512B - Virtual size: 222B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.KnGQ
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gX
Size: 512B - Virtual size: 712B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ITK
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.qmaMjr
Size: 512B - Virtual size: 254B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.OXd
Size: 512B - Virtual size: 755B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 212KB - Virtual size: 280KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 924B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

63a1cb4484bdd6a461f48b8c91c502d2

Headers

DLL Characteristics

File Characteristics

Imports

ole32

advapi32

kernel32

user32

mscms

stclient

Sections

.text Size: 17KB - Virtual size: 17KB

.LFXtPI Size: 512B - Virtual size: 222B

.KnGQ Size: 1KB - Virtual size: 1KB

.gX Size: 512B - Virtual size: 712B

.rdata Size: 1KB - Virtual size: 1KB

.ITK Size: 2KB - Virtual size: 1KB

.qmaMjr Size: 512B - Virtual size: 254B

.OXd Size: 512B - Virtual size: 755B

.data Size: 212KB - Virtual size: 280KB

.rsrc Size: 1024B - Virtual size: 924B

.text
Size: 17KB - Virtual size: 17KB

.LFXtPI
Size: 512B - Virtual size: 222B

.KnGQ
Size: 1KB - Virtual size: 1KB

.gX
Size: 512B - Virtual size: 712B

.rdata
Size: 1KB - Virtual size: 1KB

.ITK
Size: 2KB - Virtual size: 1KB

.qmaMjr
Size: 512B - Virtual size: 254B

.OXd
Size: 512B - Virtual size: 755B

.data
Size: 212KB - Virtual size: 280KB

.rsrc
Size: 1024B - Virtual size: 924B