d40aa83d24278c29af2da2b3b2505fdf_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

d40aa83d24278c29af2da2b3b2505fdf_JaffaCakes118
Size

1.1MB
MD5

d40aa83d24278c29af2da2b3b2505fdf
SHA1

cb91311f8b050b52f7134f64ad6899ab29d4efe6
SHA256

c6d2c6e53ec2b67fd87e9d9510ece578137552c90f6fcd039c603589ab049c24
SHA512

bfd345534e17db2aae184f58cd6cef348069811c48198b02bccc640a63752a2032220e18980ece715bb28fdd7db83f712b9d3f314657a70d41524eae35da17e3
SSDEEP

12288:9nfD7hxfFxFlc6wo2JVC3XPJ7WW1pZPfpllgJtyq/KTqSx7T2qZ5ZXS9PMiEDxG1:9xRPs7ifJnzPfpq/KFvXStMXU6Xw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d40aa83d24278c29af2da2b3b2505fdf_JaffaCakes118

Files

d40aa83d24278c29af2da2b3b2505fdf_JaffaCakes118
.exe windows:5 windows x86 arch:x86

77b672cf143c9cceb8cace952005c3a0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

winspool.drv

FreePrinterNotifyInfo

kernel32

ExitProcess
SetFilePointerEx
GetProcAddress
LocalAlloc
VirtualAlloc
HeapFree
GetCurrentThreadId
GetLastError
CloseHandle
GetCommTimeouts
GetSystemTime
GetSystemInfo
UnmapViewOfFile
lstrcmpiW
TlsAlloc
TlsSetValue
TlsFree
GetStartupInfoW
FindAtomW
GetPrivateProfileStructW
CreateFileW
MultiByteToWideChar
LCMapStringW
GetStringTypeW
GetConsoleWindow
SetStdHandle
GetConsoleMode
GetConsoleCP
FlushFileBuffers
HeapSize
HeapReAlloc
HeapAlloc
OutputDebugStringW
RtlUnwind
LoadLibraryExW
IsProcessorFeaturePresent
IsDebuggerPresent
GetCPInfo
GetOEMCP
GetACP
GetCommandLineW
SetLastError
EncodePointer
DecodePointer
WriteConsoleW
GetModuleHandleExW
WideCharToMultiByte
GetProcessHeap
GetStdHandle
GetFileType
DeleteCriticalSection
GetModuleFileNameW
WriteFile
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
Sleep
GetCurrentProcess
TerminateProcess
TlsGetValue
GetModuleHandleW
EnterCriticalSection
LeaveCriticalSection
IsValidCodePage

user32

GetScrollRange
SetMessageExtraInfo
ShowWindow
DdeGetData
TranslateMDISysAccel
GetScrollInfo
SetScrollInfo
CreateIcon
FindWindowExW
GetDesktopWindow
GetSysColorBrush
GetWindowRect
MoveWindow
RedrawWindow
GetSystemMetrics
SetCapture
CheckDlgButton
EndDialog
IsZoomed
ExitWindowsEx

userenv

LeaveCriticalPolicySection
GetUserProfileDirectoryW

Sections

.text
Size: 74KB - Virtual size: 74KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1.0MB - Virtual size: 7.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

77b672cf143c9cceb8cace952005c3a0

Headers

File Characteristics

Imports

winspool.drv

kernel32

user32

userenv

Sections

.text Size: 74KB - Virtual size: 74KB

.data Size: 1.0MB - Virtual size: 7.2MB

.idata Size: 3KB - Virtual size: 2KB

.xdata Size: 7KB - Virtual size: 8KB

.text
Size: 74KB - Virtual size: 74KB

.data
Size: 1.0MB - Virtual size: 7.2MB

.idata
Size: 3KB - Virtual size: 2KB

.xdata
Size: 7KB - Virtual size: 8KB