JaffaCakes118_f22c90ec7cac5a9de202f9f5bb6d2eec

Sharing

Copy URL

Twitter E-mail

General

Target

JaffaCakes118_f22c90ec7cac5a9de202f9f5bb6d2eec
Size

210KB
MD5

f22c90ec7cac5a9de202f9f5bb6d2eec
SHA1

9319cb2dfa4d92a8370cadb6254abc3fa9f186e5
SHA256

1e7e357e4913f7ba7da8d102b151e9a61abaa95b294fea784d308bc2cfd79d0d
SHA512

bbebcb553b8698cd1f13cbbce70884f9c18643a86457ec848bac6ef1e140485f61fc799e813a4a551fa907b41267aacac6d8a35bff60080649b9abe83b6b017a
SSDEEP

6144:HNS5VmS/+PRHgzKmHMyTTaPrPXa3rkO2E1eJ+p:HIaxgzKmRUs+Oe0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_f22c90ec7cac5a9de202f9f5bb6d2eec

Files

JaffaCakes118_f22c90ec7cac5a9de202f9f5bb6d2eec
.exe windows:4 windows x86 arch:x86

433c9027a901ccf1e6e140bd1b5a1d5d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

BeginUpdateResourceA
GetCurrentProcessId
DisconnectNamedPipe
GetCurrentThreadId
GetVolumeInformationA
GetUserDefaultLCID
lstrlen
Sleep
GetOEMCP
GetTimeFormatW
ExitProcess
lstrcpyW
SetPriorityClass
GetLogicalDrives
FindResourceW
GetTempPathW
GetNamedPipeInfo
GetProcessHeap
GetLocaleInfoW
GetFileAttributesW
IsBadStringPtrW
GetModuleHandleA
SuspendThread
GetProcAddress
LocalFree
GetCurrentDirectoryW
InitializeCriticalSection
IsValidLocale
CopyFileA
GetLogicalDriveStringsA
GetCommandLineW
GetUserDefaultLangID
CreateSemaphoreW
RemoveDirectoryW
GetExitCodeThread
MultiByteToWideChar
CreateMutexA
GetEnvironmentStringsW
GetSystemDirectoryA
GlobalDeleteAtom
CompareStringW
GetTempFileNameW
FindAtomW
GetAtomNameW

user32

GetMenuItemID
DestroyCursor
InsertMenuW
DrawIcon
CopyImage
EmptyClipboard
GetScrollPos
GetDC
SetDlgItemTextA
LoadMenuW
DefWindowProcA
AdjustWindowRect
FlashWindow

gdi32

GetTextColor
GetRegionData
SetMetaRgn
GetDeviceCaps
CreateHatchBrush
CreatePolygonRgn
CreatePatternBrush
CopyEnhMetaFileA
GetTextCharset

advapi32

RegEnumValueA
RegCreateKeyExW
RegRestoreKeyW
RegQueryValueA
RegOpenKeyExA

setupapi

SetupDiClassGuidsFromNameA
SetupDiCreateDeviceInfoList
CM_Intersect_Range_List
CM_Get_Child_Ex
SetupSetSourceListA
pSetupRegistryDelnode
pSetupGetInfSections
CM_Get_Hardware_Profile_Info_ExW
CM_Register_Device_Driver
SetupAddSectionToDiskSpaceListA
CM_Free_Res_Des_Handle

winmm

mmTaskCreate

Sections

.EN
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.OlNaGi
Size: 2KB - Virtual size: 430KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.Q
Size: 2KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ULUS
Size: 4KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.cGOgCW
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.utVE
Size: 6KB - Virtual size: 136KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 171KB - Virtual size: 170KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

433c9027a901ccf1e6e140bd1b5a1d5d

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

setupapi

winmm

Sections

.EN Size: 10KB - Virtual size: 10KB

.OlNaGi Size: 2KB - Virtual size: 430KB

.Q Size: 2KB - Virtual size: 19KB

.ULUS Size: 4KB - Virtual size: 24KB

.cGOgCW Size: 11KB - Virtual size: 11KB

.utVE Size: 6KB - Virtual size: 136KB

.rsrc Size: 171KB - Virtual size: 170KB

.reloc Size: 1KB - Virtual size: 1KB

.EN
Size: 10KB - Virtual size: 10KB

.OlNaGi
Size: 2KB - Virtual size: 430KB

.Q
Size: 2KB - Virtual size: 19KB

.ULUS
Size: 4KB - Virtual size: 24KB

.cGOgCW
Size: 11KB - Virtual size: 11KB

.utVE
Size: 6KB - Virtual size: 136KB

.rsrc
Size: 171KB - Virtual size: 170KB

.reloc
Size: 1KB - Virtual size: 1KB