fc5645f3b74ef448b4c0e07903b5260b_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

fc5645f3b74ef448b4c0e07903b5260b_JaffaCakes118
Size

113KB
MD5

fc5645f3b74ef448b4c0e07903b5260b
SHA1

d1126b5627040c34f5207d6ea7ca18efc0b78d07
SHA256

443906d8c7525d8deecb07d46479239dca31a49fbf5e43d519976f0181247a0a
SHA512

63306a6069129f9543c31145173421f8cd3baff04303b6beb64ac7ad2e340b7ee526ac3ea38afb31e753cfd17036300e8eaf1e41869f7131d988519037cb549f
SSDEEP

384:z2sGRiT4KCbMqp317Motg7gNPHlECoya4bDqVWICqIW7jY:zq1LHt8gLE1ks6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fc5645f3b74ef448b4c0e07903b5260b_JaffaCakes118

Files

fc5645f3b74ef448b4c0e07903b5260b_JaffaCakes118
.exe windows:5 windows x86 arch:x86

a06d3c30b2d2a7e65cb59129ce23a1d9

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

advapi32

RegQueryInfoKeyW
RegQueryValueExW
RegOpenKeyExW
OpenProcessToken
DeregisterEventSource
ReportEventW
RegCloseKey
RegisterEventSourceW
GetUserNameW

crypt32

CryptProtectData

winspool.drv

SpoolerInit

user32

wsprintfW
CharNextW
LoadStringW
MessageBoxW
LoadRemoteFonts

shell32

ShellExecuteExW

ntdll

NtClose
_chkstk
_wcsicmp
NtOpenKey
DbgPrint
wcscpy
RtlInitUnicodeString
memmove

imm32

ImmDisableIME

userenv

ord175

msvcrt

__set_app_type
_controlfp
_except_handler3
__p__fmode
_adjust_fdiv
__setusermatherr
_initterm
exit
_XcptFilter
_exit
_acmdln
__getmainargs
__p__commode

kernel32

GetCurrentProcessId
SetEvent
GetModuleHandleA
CompareFileTime
GetThreadLocale
GetCurrentThread
SetThreadPriority
CreateThread
TerminateThread
LoadLibraryW
GetProcAddress
FreeLibrary
Sleep
OpenEventW
GetEnvironmentVariableW
SetCurrentDirectoryW
GetPrivateProfileStringW
GetFileAttributesExW
GetCurrentProcess
GetLastError
FormatMessageW
SetEnvironmentVariableW
lstrcatW
lstrcmpiW
GetSystemDirectoryW
GetStartupInfoA
SearchPathW
ExpandEnvironmentStringsW
LocalAlloc
LocalFree
CreateProcessW
lstrlenW
lstrcpyW
WaitForSingleObject
CloseHandle

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 280B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 99KB - Virtual size: 100KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

a06d3c30b2d2a7e65cb59129ce23a1d9

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

crypt32

winspool.drv

user32

shell32

ntdll

imm32

userenv

msvcrt

kernel32

Sections

.text Size: 12KB - Virtual size: 11KB

.data Size: 512B - Virtual size: 280B

.rsrc Size: 99KB - Virtual size: 100KB

.text
Size: 12KB - Virtual size: 11KB

.data
Size: 512B - Virtual size: 280B

.rsrc
Size: 99KB - Virtual size: 100KB