1437c2381362a94482fdcefbb34b1bd2_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

1437c2381362a94482fdcefbb34b1bd2_JaffaCakes118
Size

8.2MB
MD5

1437c2381362a94482fdcefbb34b1bd2
SHA1

bd0a7d0a840986a3e2473b127125f75a7a42c43a
SHA256

b9edf6e6afb2ac59c08cdb40b41e6f77e03b9c3b3633798fabbad20d158b215b
SHA512

ab31b5e0a6d3dc8ec7c9b14563fa75d6d93fffb0f8b2f9f7443e1a400298be8a57aabebb720060a30f03a1f468248f3210bed584931bf27375adfceaa9556b84
SSDEEP

196608:iKJxdKT5FpvxrhiWK1TfehZpUr9Qe//r6zsOO9HMLU:iQwTJ5rhi3zSpUxQe3rCsOOGU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1437c2381362a94482fdcefbb34b1bd2_JaffaCakes118

Files

1437c2381362a94482fdcefbb34b1bd2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

cc4ec9611552054a9c1d4214f14e3864

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

lstrcpy
DeleteCriticalSection
TlsSetValue
lstrcpyA
Sleep
MulDiv
FindFirstChangeNotificationA

user32

GetKeyboardType
WindowFromPoint

advapi32

RegQueryValueExA
RegSetValueExA
StartServiceA

oleaut32

SysFreeString
SafeArrayPtrOfIndex
CreateErrorInfo

mpr

WNetGetConnectionA

version

VerQueryValueA

gdi32

UnrealizeObject
TranslateCharsetInfo

ole32

CreateStreamOnHGlobal
CoUninitialize
CoCreateInstance
DoDragDrop

comctl32

FlatSB_SetScrollPos

winspool.drv

WritePrinter

shell32

Shell_NotifyIconA
SHGetSpecialFolderLocation
SHGetMalloc
SHGetInstanceExplorer

comdlg32

PrintDlgA

qtintf

_QWidgetList_next
_QClxApplication_setWndProcHook

wsock32

WSACleanup

oledlg

OleUIObjectPropertiesA

Sections

.text
Size: 3.9MB - Virtual size: 16.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3.4MB - Virtual size: 13.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 963KB - Virtual size: 964KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

cc4ec9611552054a9c1d4214f14e3864

Headers

File Characteristics

Imports

kernel32

user32

advapi32

oleaut32

mpr

version

gdi32

ole32

comctl32

winspool.drv

shell32

comdlg32

qtintf

wsock32

oledlg

Sections

.text Size: 3.9MB - Virtual size: 16.7MB

.rsrc Size: 3.4MB - Virtual size: 13.2MB

.idata Size: 2KB - Virtual size: 4KB

.data Size: 512B - Virtual size: 1.2MB

.data Size: 963KB - Virtual size: 964KB

.data Size: 512B - Virtual size: 4KB

.text
Size: 3.9MB - Virtual size: 16.7MB

.rsrc
Size: 3.4MB - Virtual size: 13.2MB

.idata
Size: 2KB - Virtual size: 4KB

.data
Size: 512B - Virtual size: 1.2MB

.data
Size: 963KB - Virtual size: 964KB

.data
Size: 512B - Virtual size: 4KB