dffbcb725ff00f7014fd7d7856d527a7_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

dffbcb725ff00f7014fd7d7856d527a7_JaffaCakes118
Size

196KB
MD5

dffbcb725ff00f7014fd7d7856d527a7
SHA1

5d03aecc0bc76134c1225d86ebf179f1cc52b573
SHA256

6ad721bd5cafd52c589d3c87c3612303a7573862b28abec8649f5af73583fe07
SHA512

6fce91f74fc79fb288ce0bd2d2a065d8d0fd5f4cdf0081ba691ddcb52a869eb241765ab5b0801941fd98df4012481ba2d657fbed4835455dba51393229532430
SSDEEP

6144:V1qcw5cc7UTKvNA1rxGkqdreVRQmUVCF6:j3IMW1OxGkqdCHQmU4F6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dffbcb725ff00f7014fd7d7856d527a7_JaffaCakes118

Files

dffbcb725ff00f7014fd7d7856d527a7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

637eb222d34c1fdb1de7f0cf40418c9e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetWindowsDirectoryW
GetSystemTime
QueryPerformanceCounter
GetLocalTime
MoveFileExA
GetModuleHandleA
GetDateFormatA
LoadResource
CloseHandle
WriteFile
GetFileSize
SetEndOfFile
CreateFileW
GetProfileStringW
LocalAlloc
GetOEMCP
GetACP
CompareStringW
CompareStringA
GetCPInfo
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
ReadFile
LoadLibraryA
CreateFileA
FlushFileBuffers
SetStdHandle
GetModuleFileNameA
RtlUnwind
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
GetCommandLineA
GetCommandLineW
GetEnvironmentStrings
GetEnvironmentStringsW
FreeEnvironmentStringsW
MultiByteToWideChar
FreeEnvironmentStringsA
GetModuleFileNameW
UnhandledExceptionFilter
HeapFree
HeapAlloc
GetStartupInfoW
GetVersion
ExitProcess
GetLastError
TerminateProcess
GetCurrentProcess
SetFilePointer
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
IsBadWritePtr
WideCharToMultiByte
GetTimeZoneInformation
GetProcAddress
SetEnvironmentVariableA

winspool.drv

DocumentPropertiesW
ClosePrinter
GetJobA
EnumPrintersA
OpenPrinterW

shlwapi

PathRemoveFileSpecW
AssocQueryStringW
PathGetDriveNumberW
PathCompactPathExW
wnsprintfW
PathFindFileNameW
StrCmpW
StrToIntW

wininet

InternetCanonicalizeUrlA
InternetCrackUrlA
InternetCloseHandle
InternetGetLastResponseInfoA
InternetQueryOptionA
InternetQueryDataAvailable
HttpQueryInfoA
InternetOpenA
InternetSetStatusCallbackW
InternetSetFilePointer
InternetWriteFile
InternetReadFile
InternetOpenUrlA

Sections

.text
Size: 88KB - Virtual size: 87KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 92KB - Virtual size: 422KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 840B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

637eb222d34c1fdb1de7f0cf40418c9e

Headers

File Characteristics

Imports

kernel32

winspool.drv

shlwapi

wininet

Sections

.text Size: 88KB - Virtual size: 87KB

.rdata Size: 8KB - Virtual size: 6KB

.data Size: 92KB - Virtual size: 422KB

.rsrc Size: 4KB - Virtual size: 840B

.text
Size: 88KB - Virtual size: 87KB

.rdata
Size: 8KB - Virtual size: 6KB

.data
Size: 92KB - Virtual size: 422KB

.rsrc
Size: 4KB - Virtual size: 840B