d00589d1ead2df1c7a2dcbe81b3893a9_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

d00589d1ead2df1c7a2dcbe81b3893a9_JaffaCakes118
Size

263KB
MD5

d00589d1ead2df1c7a2dcbe81b3893a9
SHA1

0c1812d2f48ec1a26a2626225ec9f11d2d06c78b
SHA256

d23fd4d035174de77d96ccea24aaa2fa229d493d41352a208879ab9446b5b2ad
SHA512

f11f0dc40fa42572822448e20a7142b4508ef368875b7f494990841d5dd0329b569d3049215becddaa91397737734c586647b5cbeb7b9a4fd8b4529c81a4c3cc
SSDEEP

6144:uG0w4rrdhvh9Bc/byJT5E17pn2Hhru9dLP/sBPA/G:uw4vRl07V+y9WhA/G

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d00589d1ead2df1c7a2dcbe81b3893a9_JaffaCakes118

Files

d00589d1ead2df1c7a2dcbe81b3893a9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9f14388db1fdededc7bbb820347d9522

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SystemTimeToFileTime
CreateFileW
LeaveCriticalSection
GetProcessHeap
EnterCriticalSection
FindResourceExW
LoadResource
HeapFree
HeapSize
UnhandledExceptionFilter
lstrcmpiA
GetCurrentThreadId
FreeLibrary
HeapReAlloc
LoadLibraryExW
GetLocalTime
SetUnhandledExceptionFilter
CloseHandle
LockResource
DeleteCriticalSection
ReadFile
LocalAlloc
LocalFree
RaiseException
HeapDestroy
GetStdHandle
GetSystemTimeAsFileTime
FormatMessageW
FindResourceW
GetFileSizeEx
SizeofResource
WriteFile
HeapAlloc
lstrcmpA
IsDebuggerPresent
SetFilePointerEx
VirtualAllocEx
GetModuleHandleA

advapi32

GetTraceEnableLevel
UnregisterTraceGuids
RegQueryValueExW
RegOpenKeyExW
GetTraceLoggerHandle
RegCloseKey
ControlTraceW
RegisterTraceGuidsW
TraceEvent
GetTraceEnableFlags

shlwapi

PathAddBackslashW
PathFileExistsW
PathStripPathW

winspool.drv

SetPrinterW
AdvancedSetupDialog
DeletePrinterConnectionW
PerfOpen
EXTDEVICEMODE
EnumPrinterDriversW
DevicePropertySheets
EnumFormsW
EnumPortsA
DeviceCapabilities
StartPagePrinter
DevQueryPrint

oledlg

OleUIObjectPropertiesA
OleUIChangeIconW
OleUIAddVerbMenuW

Sections

.QwfR
Size: 1KB - Virtual size: 37KB

IMAGE_SCN_MEM_READ

.EAeKTf
Size: 3KB - Virtual size: 13KB

IMAGE_SCN_MEM_READ

.ITOkSwi
Size: 3KB - Virtual size: 30KB

IMAGE_SCN_MEM_READ

.EeYFtGi
Size: 1024B - Virtual size: 29KB

IMAGE_SCN_MEM_READ

.text
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.pJUewT
Size: 1024B - Virtual size: 799B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.Ywuy
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ipAxoYi
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.LVTVh
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.yLDaz
Size: 1024B - Virtual size: 751B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.sJDw
Size: 1024B - Virtual size: 584B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 7KB - Virtual size: 113KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aKRpo
Size: 1024B - Virtual size: 685B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 207KB - Virtual size: 207KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.XvvGFf
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9f14388db1fdededc7bbb820347d9522

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

advapi32

shlwapi

winspool.drv

oledlg

Sections

.QwfR Size: 1KB - Virtual size: 37KB

.EAeKTf Size: 3KB - Virtual size: 13KB

.ITOkSwi Size: 3KB - Virtual size: 30KB

.EeYFtGi Size: 1024B - Virtual size: 29KB

.text Size: 16KB - Virtual size: 16KB

.pJUewT Size: 1024B - Virtual size: 799B

.Ywuy Size: 1KB - Virtual size: 1KB

.ipAxoYi Size: 3KB - Virtual size: 2KB

.LVTVh Size: 2KB - Virtual size: 2KB

.yLDaz Size: 1024B - Virtual size: 751B

.sJDw Size: 1024B - Virtual size: 584B

.data Size: 7KB - Virtual size: 113KB

.aKRpo Size: 1024B - Virtual size: 685B

.rdata Size: 207KB - Virtual size: 207KB

.XvvGFf Size: 1KB - Virtual size: 1KB

.rsrc Size: 17KB - Virtual size: 17KB

.QwfR
Size: 1KB - Virtual size: 37KB

.EAeKTf
Size: 3KB - Virtual size: 13KB

.ITOkSwi
Size: 3KB - Virtual size: 30KB

.EeYFtGi
Size: 1024B - Virtual size: 29KB

.text
Size: 16KB - Virtual size: 16KB

.pJUewT
Size: 1024B - Virtual size: 799B

.Ywuy
Size: 1KB - Virtual size: 1KB

.ipAxoYi
Size: 3KB - Virtual size: 2KB

.LVTVh
Size: 2KB - Virtual size: 2KB

.yLDaz
Size: 1024B - Virtual size: 751B

.sJDw
Size: 1024B - Virtual size: 584B

.data
Size: 7KB - Virtual size: 113KB

.aKRpo
Size: 1024B - Virtual size: 685B

.rdata
Size: 207KB - Virtual size: 207KB

.XvvGFf
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 17KB - Virtual size: 17KB