c88c03f2c7c3b214d40ac8633306be96_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

c88c03f2c7c3b214d40ac8633306be96_JaffaCakes118
Size

204KB
MD5

c88c03f2c7c3b214d40ac8633306be96
SHA1

5c2c099651f12396a581cd5710e930112eb19107
SHA256

d3c7bffeba126b68d71cc7349638c64dbd00803c2e57a3852192001dbccde8df
SHA512

b3e3b071a62de4906390b830fc06a3424cbc71ddc55d2fbdbeede1c73253660dfe14b15a0d49a5a97a5b2a0c48602a9a9b796e942d77ae2d816e0438114870d6
SSDEEP

6144:hveY2TNgrT9xrb4KgGiB7z/a9Qrtgq7Kfca:hkhAT9xn4KgGiB7bS8tzu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c88c03f2c7c3b214d40ac8633306be96_JaffaCakes118

Files

c88c03f2c7c3b214d40ac8633306be96_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d14e22ee5de0cc56f4e8bdee1753465a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DosDateTimeToFileTime
RaiseException
GetDiskFreeSpaceW
GetWindowsDirectoryA
SetErrorMode
ReplaceFileA
SetComputerNameW
GetLongPathNameA
CreateDirectoryA
OpenWaitableTimerA
GetModuleHandleA
CreateMutexW
ExitProcess
CreateMailslotA
ReadDirectoryChangesW
QueryPerformanceCounter
FileTimeToDosDateTime
IsBadStringPtrA
CompareStringA
FindAtomW
GetOEMCP
GetLogicalDriveStringsA
GetShortPathNameA
OpenProcess
GetProcessHeap
GetNamedPipeInfo
GetTimeFormatW
GetAtomNameW
lstrlenW
GlobalDeleteAtom
ExpandEnvironmentStringsW
GetFileTime
GetProcAddress
OpenFile
GetDiskFreeSpaceA
SetThreadPriority
GetExpandedNameA
CreateMailslotW
EnumTimeFormatsA

user32

SetWindowLongA
CallWindowProcW
UpdateWindow
DefWindowProcW
GetKeyboardType
DrawIcon
ShowWindow
RegisterClassW
SetTimer
LoadMenuA
GetFocus
GetClassLongW
SetDlgItemTextA
SetCursor
InsertMenuW
RegisterWindowMessageW
LoadMenuW
GetMenuItemID
wsprintfA
wsprintfW
IsMenu
SendMessageW
DefFrameProcW
FrameRect
CreateDialogIndirectParamW
WaitForInputIdle
GetDC
LoadImageW
MessageBoxA

gdi32

CombineRgn
FloodFill
GetTextExtentPointW
CreatePalette
BeginPath
GetGraphicsMode
CreateICW
GetTextCharset
SetRectRgn
GetDCBrushColor

advapi32

RegOpenKeyExW
RegQueryInfoKeyW
RegCloseKey
RegQueryValueW
RegDeleteKeyW
RegRestoreKeyW

ws2_32

getservbyport

winspool.drv

PerfCollect
AddPrinterConnectionW
XcvDataW
AddFormA
DeleteFormW
EnumMonitorsA
DeviceCapabilities
SpoolerPrinterEvent

Sections

.jDxvQ
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bX
Size: 3KB - Virtual size: 198KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.Kk
Size: 3KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.HwXr
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.PGje
Size: 4KB - Virtual size: 188KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 170KB - Virtual size: 169KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 960B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d14e22ee5de0cc56f4e8bdee1753465a

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

ws2_32

winspool.drv

Sections

.jDxvQ Size: 10KB - Virtual size: 10KB

.bX Size: 3KB - Virtual size: 198KB

.Kk Size: 3KB - Virtual size: 22KB

.HwXr Size: 11KB - Virtual size: 10KB

.PGje Size: 4KB - Virtual size: 188KB

.rsrc Size: 170KB - Virtual size: 169KB

.reloc Size: 1024B - Virtual size: 960B

.jDxvQ
Size: 10KB - Virtual size: 10KB

.bX
Size: 3KB - Virtual size: 198KB

.Kk
Size: 3KB - Virtual size: 22KB

.HwXr
Size: 11KB - Virtual size: 10KB

.PGje
Size: 4KB - Virtual size: 188KB

.rsrc
Size: 170KB - Virtual size: 169KB

.reloc
Size: 1024B - Virtual size: 960B