05952924d9d2f39a85b94689fd3bd5a0_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

05952924d9d2f39a85b94689fd3bd5a0_JaffaCakes118
Size

39KB
MD5

05952924d9d2f39a85b94689fd3bd5a0
SHA1

0041f2eaee0f8f63bd8d34081399d59ba8b756ef
SHA256

d5be5abdba87d3ce5e2934441eb9091f7f44af2bee9d581c6d04223fc72b46fe
SHA512

df8d7a46c44802dcecc6421e370ec1bb24bc37730837722fd5af42c4b3025edf2925f032981bc5bc18e5c2c576d95994505f67fb638a326132321e72c63f7ed6
SSDEEP

768:VHcBAAUixJYkWF2Y0TFLEGq2XNMiznJTVuXo0jUucGgn6y:EA9ixmkWwY0TFLEP2XNMibN6o0o/GKp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
05952924d9d2f39a85b94689fd3bd5a0_JaffaCakes118

Files

05952924d9d2f39a85b94689fd3bd5a0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

57d30cf4c6fe8d9ef299ca199080a539

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

AdjustWindowRect
DefDlgProcA
DeferWindowPos
GetWindowRect
EnumThreadWindows
GetNextDlgGroupItem
ChildWindowFromPoint
ArrangeIconicWindows
IsDialogMessageA
MoveWindow
BringWindowToTop
FindWindowA
LoadIconA

gdi32

Chord
Arc
EnumObjects
GetBrushOrgEx
CloseEnhMetaFile
ExtEscape
EqualRgn
AngleArc
CreateFontA
AddFontResourceA
DescribePixelFormat
CopyEnhMetaFileW
CopyEnhMetaFileA

advapi32

BackupEventLogA
RegReplaceKeyA
RegOpenKeyExA
OpenEventLogW
ReadEventLogA

kernel32

SetLastError
TlsGetValue
GetLastError
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
LeaveCriticalSection
GetCPInfo
GetStringTypeW
WaitForSingleObject
GlobalFlags
GetTimeFormatA
GetThreadLocale
IsBadWritePtr
EnterCriticalSection
InitializeCriticalSection
ReleaseSemaphore
HeapValidate
GetACP
WriteProfileStringA
GetProfileIntA
GetProcAddress
GetHandleInformation
VirtualAllocEx
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
LoadLibraryA
HeapReAlloc
VirtualAlloc
HeapAlloc
TlsAlloc
TlsSetValue
GetCurrentThreadId
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetOEMCP

winspool.drv

DeletePrinterDriverExA
ConnectToPrinterDlg
EnumJobsW
GetPrinterDriverW
GetPrinterDriverA
AddPrinterConnectionA
SetPrinterA
AbortPrinter

netapi32

NetUserChangePassword
NetLocalGroupDelMembers
NetConnectionEnum
NetGroupAdd
NetConfigSet
NetGetJoinInformation
NetAuditClear
NetFileGetInfo
NetAuditWrite

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 81KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.fxjuwu
Size: 331KB - Virtual size: 330KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

57d30cf4c6fe8d9ef299ca199080a539

Headers

File Characteristics

Imports

user32

gdi32

advapi32

kernel32

winspool.drv

netapi32

Sections

.text Size: 28KB - Virtual size: 27KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 2KB - Virtual size: 81KB

.fxjuwu Size: 331KB - Virtual size: 330KB

.rsrc Size: 3KB - Virtual size: 2KB

.text
Size: 28KB - Virtual size: 27KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 2KB - Virtual size: 81KB

.fxjuwu
Size: 331KB - Virtual size: 330KB

.rsrc
Size: 3KB - Virtual size: 2KB