JaffaCakes118_6e9100a34244a85825cb56d4d08d184c

Sharing

Copy URL

Twitter E-mail

General

Target

JaffaCakes118_6e9100a34244a85825cb56d4d08d184c
Size

204KB
MD5

6e9100a34244a85825cb56d4d08d184c
SHA1

00855dd3c61b0dba430437b7c2419b0cf2107d3a
SHA256

14de2feb9774e8b65f11487b4cb3e183f7fa487614e70c6f1f596f1fba5387f4
SHA512

9df5bb64c5520a25c36437b84e848da7dcec86844c8bed45ef2157de2fb2be2c4717819bf9ea30f9ad90cb6fdc5f968ca40176f878eb8bc392a2cc973972dee5
SSDEEP

6144:aveY2TNgrT9xrb4KgGiB7z/a9Qrtgq7Kfca:akhAT9xn4KgGiB7bS8tzu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_6e9100a34244a85825cb56d4d08d184c

Files

JaffaCakes118_6e9100a34244a85825cb56d4d08d184c
.exe windows:4 windows x86 arch:x86

d14e22ee5de0cc56f4e8bdee1753465a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DosDateTimeToFileTime
RaiseException
GetDiskFreeSpaceW
GetWindowsDirectoryA
SetErrorMode
ReplaceFileA
SetComputerNameW
GetLongPathNameA
CreateDirectoryA
OpenWaitableTimerA
GetModuleHandleA
CreateMutexW
ExitProcess
CreateMailslotA
ReadDirectoryChangesW
QueryPerformanceCounter
FileTimeToDosDateTime
IsBadStringPtrA
CompareStringA
FindAtomW
GetOEMCP
GetLogicalDriveStringsA
GetShortPathNameA
OpenProcess
GetProcessHeap
GetNamedPipeInfo
GetTimeFormatW
GetAtomNameW
lstrlenW
GlobalDeleteAtom
ExpandEnvironmentStringsW
GetFileTime
GetProcAddress
OpenFile
GetDiskFreeSpaceA
SetThreadPriority
GetExpandedNameA
CreateMailslotW
EnumTimeFormatsA

user32

SetWindowLongA
CallWindowProcW
UpdateWindow
DefWindowProcW
GetKeyboardType
DrawIcon
ShowWindow
RegisterClassW
SetTimer
LoadMenuA
GetFocus
GetClassLongW
SetDlgItemTextA
SetCursor
InsertMenuW
RegisterWindowMessageW
LoadMenuW
GetMenuItemID
wsprintfA
wsprintfW
IsMenu
SendMessageW
DefFrameProcW
FrameRect
CreateDialogIndirectParamW
WaitForInputIdle
GetDC
LoadImageW
MessageBoxA

gdi32

CombineRgn
FloodFill
GetTextExtentPointW
CreatePalette
BeginPath
GetGraphicsMode
CreateICW
GetTextCharset
SetRectRgn
GetDCBrushColor

advapi32

RegOpenKeyExW
RegQueryInfoKeyW
RegCloseKey
RegQueryValueW
RegDeleteKeyW
RegRestoreKeyW

ws2_32

getservbyport

winspool.drv

PerfCollect
AddPrinterConnectionW
XcvDataW
AddFormA
DeleteFormW
EnumMonitorsA
DeviceCapabilities
SpoolerPrinterEvent

Sections

.jDxvQ
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bX
Size: 3KB - Virtual size: 198KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.Kk
Size: 3KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.HwXr
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.PGje
Size: 4KB - Virtual size: 188KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 170KB - Virtual size: 169KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 960B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d14e22ee5de0cc56f4e8bdee1753465a

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

ws2_32

winspool.drv

Sections

.jDxvQ Size: 10KB - Virtual size: 10KB

.bX Size: 3KB - Virtual size: 198KB

.Kk Size: 3KB - Virtual size: 22KB

.HwXr Size: 11KB - Virtual size: 10KB

.PGje Size: 4KB - Virtual size: 188KB

.rsrc Size: 170KB - Virtual size: 169KB

.reloc Size: 1024B - Virtual size: 960B

.jDxvQ
Size: 10KB - Virtual size: 10KB

.bX
Size: 3KB - Virtual size: 198KB

.Kk
Size: 3KB - Virtual size: 22KB

.HwXr
Size: 11KB - Virtual size: 10KB

.PGje
Size: 4KB - Virtual size: 188KB

.rsrc
Size: 170KB - Virtual size: 169KB

.reloc
Size: 1024B - Virtual size: 960B