JaffaCakes118_3958959cea06679f591c8920cbb00b9a

Sharing

Copy URL

Twitter E-mail

General

Target

JaffaCakes118_3958959cea06679f591c8920cbb00b9a
Size

177KB
MD5

3958959cea06679f591c8920cbb00b9a
SHA1

b3fb1c0c1d03580a8bce4ab48b566bf182b16385
SHA256

101afb81cb6748091f919ecb695c4c2bf981ac9b37a7cad39de077ca4123b5cf
SHA512

22701ce63dd93b38c8043e53f20ebac34e617071535e3238748dc392ccd49cc8e64691b01be5cafb42df1bfe359259298f87d6c5fec1c60fae2581a090d6d994
SSDEEP

3072:st21N2N6buomS/bDoRIMmllcixB2X+ANGyyvpcXytVlSf8+CxZUO8C:sc1U4HjDoRIl7ci2+ANGFvZVlSfPCxv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_3958959cea06679f591c8920cbb00b9a

Files

JaffaCakes118_3958959cea06679f591c8920cbb00b9a
.exe windows:4 windows x86 arch:x86

6ae37c11ce5024729bf4066bb47cd048

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegOpenKeyExW
RegQueryValueExW
RegCloseKey

shlwapi

PathFileExistsW
PathAppendW
PathFindFileNameW
PathFindExtensionW

gdi32

SetViewportExtEx
DeleteObject
SetViewportOrgEx
ScaleWindowExtEx
GetDeviceCaps
SelectObject
ExtTextOutW
PtVisible
CreateBitmap
ScaleViewportExtEx
SetMapMode
SetBkColor
RestoreDC
TextOutW
Escape
RectVisible
SetTextColor
GetClipBox
SaveDC
DeleteDC
SetWindowExtEx
OffsetViewportOrgEx
GetStockObject

shell32

SHGetSpecialFolderPathW

winspool.drv

DocumentPropertiesW
ClosePrinter
OpenPrinterW

kernel32

GetStringTypeA
HeapSize
GetStdHandle
IsBadCodePtr
GetShortPathNameA
GetStringTypeW
SetUnhandledExceptionFilter
VirtualQuery
GetSystemTimeAsFileTime
IsBadWritePtr
HeapFree
GetEnvironmentStringsW
HeapDestroy
GetProcessAffinityMask
GetFileType
SetStdHandle
GetStartupInfoA
UnhandledExceptionFilter
IsBadReadPtr
GetOEMCP
GetCurrentProcessId
EnumResourceTypesW
HeapReAlloc
RtlUnwind
GetCPInfo
GetSystemInfo
WriteFile
QueryPerformanceCounter
GetCurrentProcess
VirtualFree
GetCommandLineA
VirtualAlloc
GetTickCount
GetFileAttributesA
VirtualProtect
FreeEnvironmentStringsW
SetHandleCount
GetModuleFileNameA
HeapAlloc
HeapCreate
GetEnvironmentStrings
LCMapStringW
LCMapStringA
SetFilePointer
TerminateProcess
FlushFileBuffers
ExitProcess

ole32

CoUninitialize
CoCreateInstance
CoInitialize

user32

EnableMenuItem
MessageBoxW
ReleaseDC
GetSystemMetrics
GetDC
LoadBitmapW
GetLastActivePopup
ModifyMenuW
GetWindowTextW
GetSysColor
GetParent
GetWindowLongW
LoadCursorW
GetMenuCheckMarkDimensions
IsWindowEnabled
EnableWindow
CheckMenuItem
GetSysColorBrush

Sections

.text
Size: 102KB - Virtual size: 102KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: 69KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 1024B - Virtual size: 248KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6ae37c11ce5024729bf4066bb47cd048

Headers

File Characteristics

Imports

advapi32

shlwapi

gdi32

shell32

winspool.drv

kernel32

ole32

user32

Sections

.text Size: 102KB - Virtual size: 102KB

.rdata Size: 3KB - Virtual size: 2KB

.bss Size: 69KB - Virtual size: 69KB

.tls Size: 1024B - Virtual size: 248KB

.text
Size: 102KB - Virtual size: 102KB

.rdata
Size: 3KB - Virtual size: 2KB

.bss
Size: 69KB - Virtual size: 69KB

.tls
Size: 1024B - Virtual size: 248KB