ddadccb06dd3535f04acc27f0e27b855_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

ddadccb06dd3535f04acc27f0e27b855_JaffaCakes118
Size

368KB
MD5

ddadccb06dd3535f04acc27f0e27b855
SHA1

5c7f33dae7c5866e1efb4048b8c51f2ed9c39f26
SHA256

855e2e58915abfd690b5643ec822c1d629986a88dbbea8bd7d5df56671ecdf2d
SHA512

29b9981f1635390bb43d0b06b128867a7ba93ba117a4a7c50d6224417b09aa98235b2440ad9032c52de44a82131689942bc7119466b7a653b380e9a37fd93500
SSDEEP

6144:y64R1xbxpyndBCKQL8c/8jEpTN2KcZ/Gu2cNB:y64R1xbxMGL/8jaAZ2cN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ddadccb06dd3535f04acc27f0e27b855_JaffaCakes118

Files

ddadccb06dd3535f04acc27f0e27b855_JaffaCakes118
.exe windows:5 windows x86 arch:x86

6e0abf88ed7c876c221ea8f3b3bf4f3b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

vEg.pdb

Imports

ntdll

qsort

msvcrt

localeconv

comdlg32

PrintDlgExW

netapi32

NetApiBufferSize

setupapi

SetupDiGetClassInstallParamsW
SetupDiGetDriverInfoDetailA
CM_Get_DevNode_Registry_PropertyW
SetupCloseLog

user32

EnumThreadWindows
GetClientRect
GetPriorityClipboardFormat
ShowWindowAsync
CreateIconFromResourceEx
ReleaseDC

rasapi32

RasEnumEntriesW
RasEnumConnectionsW

wintrust

WintrustGetRegPolicyFlags

shlwapi

StrCSpnIW

crypt32

CryptHashCertificate
CertCreateSelfSignCertificate
CertGetStoreProperty
CryptUnregisterOIDFunction

ole32

OleCreateEmbeddingHelper
GetClassFile
MkParseDisplayName

winmm

waveInGetPosition
mixerGetLineInfoW

iphlpapi

GetAdaptersInfo
GetTcpStatistics

oleaut32

VARIANT_UserUnmarshal
SafeArrayDestroyDescriptor

rpcrt4

I_RpcAsyncAbortCall
RpcAsyncCompleteCall
RpcSmDestroyClientContext
RpcBindingToStringBindingA
UuidCreateSequential

kernel32

FindFirstChangeNotificationA
_lopen
OutputDebugStringW
AddVectoredExceptionHandler
SetThreadPriority
HeapAlloc
ResumeThread
GetTickCount
SetCommConfig
GetModuleHandleA
RaiseException
GetFileSize
GlobalFindAtomA
PeekConsoleInputA
FoldStringW

pdh

PdhBrowseCountersW
PdhEnumObjectsW

wininet

HttpSendRequestW

winspool.drv

XcvDataW

version

VerFindFileW

gdi32

PaintRgn
CreateBitmap
CloseMetaFile

advapi32

CryptGetHashParam
ObjectDeleteAuditAlarmW
CreateRestrictedToken
RegSetValueW
ChangeServiceConfig2A
TreeResetNamedSecurityInfoW
DeleteAce
GetSecurityDescriptorLength
ReadEncryptedFileRaw

mprapi

MprInfoDelete
MprAdminInterfaceGetHandle
MprAdminMIBEntryGetFirst

Sections

.text
Size: 124KB - Virtual size: 124KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 114KB - Virtual size: 120KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.EXP
Size: 106KB - Virtual size: 105KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 904B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6e0abf88ed7c876c221ea8f3b3bf4f3b

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

ntdll

msvcrt

comdlg32

netapi32

setupapi

user32

rasapi32

wintrust

shlwapi

crypt32

ole32

winmm

iphlpapi

oleaut32

rpcrt4

kernel32

pdh

wininet

winspool.drv

version

gdi32

advapi32

mprapi

Sections

.text Size: 124KB - Virtual size: 124KB

.data Size: 114KB - Virtual size: 120KB

.idata Size: 3KB - Virtual size: 2KB

.EXP Size: 106KB - Virtual size: 105KB

.rsrc Size: 1024B - Virtual size: 904B

.reloc Size: 18KB - Virtual size: 18KB

.text
Size: 124KB - Virtual size: 124KB

.data
Size: 114KB - Virtual size: 120KB

.idata
Size: 3KB - Virtual size: 2KB

.EXP
Size: 106KB - Virtual size: 105KB

.rsrc
Size: 1024B - Virtual size: 904B

.reloc
Size: 18KB - Virtual size: 18KB