JaffaCakes118_eff8f73d4e5ffbfd8cb4a8f509e7b5e8

Sharing

Copy URL

Twitter E-mail

General

Target

JaffaCakes118_eff8f73d4e5ffbfd8cb4a8f509e7b5e8
Size

135KB
MD5

eff8f73d4e5ffbfd8cb4a8f509e7b5e8
SHA1

bedbda380d25eaa952738340b3d3c3a6b9cc03f2
SHA256

2909051344dd80a33dfd47d1cf60372ba535aa3745ed0df8434681a3e715f32d
SHA512

e6e236f195ed860f35bb2ec0fb830744f1f14b4ee00b7f14ae120fc083d3b9461532178e14c0aed38c1070b2326387018e7283d14f64f17d11ac0aef6afa0fb8
SSDEEP

3072:8ir6VutmzgApobYr1fpCjeAaacVoh3EYvp3zoodIy:8E6sEgAmYhfpCCAjNBXd7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_eff8f73d4e5ffbfd8cb4a8f509e7b5e8

Files

JaffaCakes118_eff8f73d4e5ffbfd8cb4a8f509e7b5e8
.exe windows:4 windows x86 arch:x86

e043befb9ef1f4fe48f2d3182b440d00

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msi

ord30
ord8
ord57

gdi32

GetMetaFileBitsEx
OffsetWindowOrgEx
SetBoundsRect
GetEnhMetaFileW
CreateEnhMetaFileA
CreateBitmapIndirect
CreateHalftonePalette
GetBkColor
StrokePath
GetBoundsRect
ExtFloodFill
GetTextExtentPoint32W
GetTextMetricsW
PathToRegion
SetWindowExtEx
SetGraphicsMode
GetCurrentObject
GetTextExtentPointA

oleaut32

VarDateFromR4
VarI2FromDisp
DispGetParam
SysReAllocString
VarUI1FromR8
VarUI1FromI1

version

GetFileVersionInfoSizeW

kernel32

GetModuleHandleA
GetStartupInfoA
GlobalFindAtomW
FlushFileBuffers
GetModuleHandleW

wininet

SetUrlCacheEntryInfoA
FindNextUrlCacheEntryExA
InternetSetCookieW
InternetCloseHandle
CreateUrlCacheEntryW
FindFirstUrlCacheEntryA
InternetAutodialHangup
HttpSendRequestExW
FtpRenameFileA
RetrieveUrlCacheEntryStreamW
InternetSetFilePointer
GopherCreateLocatorA

ole32

StgCreatePropSetStg

winspool.drv

DeletePrinterConnectionW
AddPortA
EnumPrinterDriversW
AddPrintProcessorW
EnumPrinterDataA
DeletePrintProcessorA
FindNextPrinterChangeNotification
FindFirstPrinterChangeNotification
DeleteMonitorA
SetPortA
DocumentPropertiesA
EnumFormsA

setupapi

SetupCloseLog

pdh

PdhValidatePathA
PdhGetLogFileSize

user32

CallMsgFilterW
DdeAccessData
GetWindowContextHelpId
DeleteMenu
InsertMenuA
CharUpperBuffW
SendMessageTimeoutA
GetClassInfoExW
DdeQueryConvInfo
CreateDialogParamA
GetMessagePos
SetProcessWindowStation
MessageBoxW
CallNextHookEx
IsWindow
DrawFrameControl
GetNextDlgTabItem
GetClipboardFormatNameW
GetWindowTextLengthW
GetKeyboardType
DrawAnimatedRects
GetMessageA

msvcrt

_adjust_fdiv
_except_handler3
_exit
_controlfp
__set_app_type
__p__fmode
__p__commode
memcmp
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter

advapi32

SetNamedSecurityInfoW
EnumServicesStatusW
RegOpenKeyW
RegEnumValueA
RegUnLoadKeyW
RegEnumKeyExA
CreateProcessAsUserW
AdjustTokenPrivileges

rpcrt4

RpcMgmtInqStats
I_RpcBindingIsClientLocal
NdrNonEncapsulatedUnionUnmarshall
NDRSContextUnmarshallEx
RpcAsyncInitializeHandle
NdrConformantStructMarshall
RpcSmSetThreadHandle
I_RpcFreeBuffer
NdrEncapsulatedUnionMemorySize
I_RpcBindingCopy
MIDL_wchar_strcpy
float_from_ndr
NdrFreeBuffer
NdrUserMarshalSimpleTypeConvert
RpcServerUseProtseqExW
NdrSimpleStructFree
I_RpcGetCurrentCallHandle
I_RpcBindingInqTransportType
I_RpcAsyncSetHandle
RpcBindingInqAuthClientW
UuidFromStringA
NdrSimpleStructMarshall

imm32

ImmGetIMEFileNameW

rasapi32

RasDialA

oleacc

WindowFromAccessibleObject

Sections

.text
Size: 105KB - Virtual size: 104KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 25KB - Virtual size: 3.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

e043befb9ef1f4fe48f2d3182b440d00

Headers

File Characteristics

Imports

msi

gdi32

oleaut32

version

kernel32

wininet

ole32

winspool.drv

setupapi

pdh

user32

msvcrt

advapi32

rpcrt4

imm32

rasapi32

oleacc

Sections

.text Size: 105KB - Virtual size: 104KB

.rdata Size: 4KB - Virtual size: 4KB

.data Size: 25KB - Virtual size: 3.5MB

.text
Size: 105KB - Virtual size: 104KB

.rdata
Size: 4KB - Virtual size: 4KB

.data
Size: 25KB - Virtual size: 3.5MB