157e2adbcecc6b3d26a18d8ded4e37f2_JaffaCakes118

General

Target

157e2adbcecc6b3d26a18d8ded4e37f2_JaffaCakes118
Size

335KB
MD5

157e2adbcecc6b3d26a18d8ded4e37f2
SHA1

4ce9949c00dc66d475fe5a8b1ab82ed722444ba4
SHA256

e6fff140b99722aa2ab57b7994e02422000a2c3525d87aabc09f33581aed2b18
SHA512

5d5e88382d39ece5c76b4f1c691075c07ad3dcdc789e5966e02fb80d5bb5c004d38b8d29e4efbfe24cef3dc1ed6a57af18b6c4601ec8251a4b7f523a8dd98324
SSDEEP

6144:NHfS9d9BbP4mWECjDOsTMJ0ALpLLnF1VaPx5aGjU/d8wonFFwPIAopRkN49fx/lq:FfYLIxn1T+p//MpUN8ws63aiAxw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
157e2adbcecc6b3d26a18d8ded4e37f2_JaffaCakes118

Files

157e2adbcecc6b3d26a18d8ded4e37f2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

29294cfdae0f5b63e5b7f77b78256625

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetDlgItemTextA
MessageBoxIndirectA
GetWindowPlacement
BeginDeferWindowPos
GetDlgItemInt
GetLastActivePopup
SetSysColors
EnumChildWindows
GetDlgItem
GetSysColor
SetForegroundWindow
SetWindowTextA
ShowWindow
ChildWindowFromPointEx
GetNextDlgGroupItem

advapi32

RegCreateKeyExA
RegFlushKey
RegEnumKeyExA
RegReplaceKeyA
RegDeleteKeyA
RegNotifyChangeKeyValue
RegQueryValueExA
RegOpenKeyA
RegEnumKeyA
RegDeleteValueA

kernel32

GetProcAddress
WriteProfileSectionA
GetCurrentProcess
WritePrivateProfileStructA
WritePrivateProfileSectionA
DeleteFileA
GetHandleInformation
VirtualAlloc
GetStartupInfoA
GetComputerNameA
SetHandleInformation
GetCommandLineA
GetModuleHandleA
WriteProfileStringA
CloseHandle

winspool.drv

DeletePrinterDataExA
DeletePrinterDataA
DeletePrinter
ConfigurePortA
AdvancedDocumentPropertiesA
AddFormA
DeletePrinterConnectionA
AddPrinterA
AddJobA
AddPrinterConnectionA
ConnectToPrinterDlg
AbortPrinter

msvcrt

_acmdln
exit
_XcptFilter
_exit
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
__getmainargs

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 315KB - Virtual size: 314KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

29294cfdae0f5b63e5b7f77b78256625

Headers

File Characteristics

Imports

user32

advapi32

kernel32

winspool.drv

msvcrt

Sections

.text Size: 13KB - Virtual size: 13KB

.rdata Size: 315KB - Virtual size: 314KB

.data Size: 512B - Virtual size: 100KB

.rsrc Size: 5KB - Virtual size: 5KB

.text
Size: 13KB - Virtual size: 13KB

.rdata
Size: 315KB - Virtual size: 314KB

.data
Size: 512B - Virtual size: 100KB

.rsrc
Size: 5KB - Virtual size: 5KB