e8b4fe62321a2020ba0b3160745e4c2e_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

e8b4fe62321a2020ba0b3160745e4c2e_JaffaCakes118
Size

80KB
MD5

e8b4fe62321a2020ba0b3160745e4c2e
SHA1

415bc61c090efbea2816c29e3f838bfdea73dde3
SHA256

7c66a5722d702e93ba2aaba2dea6a95f893f2df4c32dc7b02c35eea4edd39189
SHA512

cf7e8a73f5de5360acaddc7dca0f66fdb850a9454f18a8963499133d76c4f71d04222d5da300987fe55560b9dc017e5fc780a7f24f2889f62ab686c59e1ab669
SSDEEP

1536:dhCa180NBvFP2i19f4UkUeoXkx1s3Q39x8BwYdYFqM1r9YV9UjcgqOMhBqq:F7BvFP4eemkg3uQjUVmV9O6Oi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e8b4fe62321a2020ba0b3160745e4c2e_JaffaCakes118

Files

e8b4fe62321a2020ba0b3160745e4c2e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7829046d72d5f2f1808d70300e72e91e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WriteConsoleOutputCharacterW
SetupComm
LoadLibraryW
Thread32First
WriteTapemark
GetPrivateProfileStringW
lstrcmpA
GlobalCompact
GetProfileIntA
EnumDateFormatsExW
VirtualQueryEx
CreateMutexA
VirtualAlloc
BeginUpdateResourceW
GetDriveTypeW
BackupRead
CommConfigDialogW
SetCommBreak
LocalShrink
CopyFileExW
SetConsoleOutputCP
GetPriorityClass
WriteProfileStringA
DeleteFileW
QueryPerformanceFrequency
GetCurrentProcessId
GetDiskFreeSpaceExW
SetProcessWorkingSetSize
CreateNamedPipeA
lstrlenA
CreateMailslotA
LockFileEx
GetLocaleInfoW
SetPriorityClass
Module32First
ExpandEnvironmentStringsA
LocalSize
WaitCommEvent
EnumCalendarInfoW
WriteFileEx
CreateIoCompletionPort
SetThreadIdealProcessor
SearchPathA
FreeResource
WriteProcessMemory
SetTimeZoneInformation
GetTempFileNameW
EnumResourceLanguagesW
WaitNamedPipeW
CompareStringW
GetWindowsDirectoryW
BuildCommDCBAndTimeoutsA
GetCurrencyFormatA
SetSystemTime
GetTempFileNameA
OpenSemaphoreA
lstrcat
ConnectNamedPipe
GetProcessVersion
GetCommModemStatus
VirtualProtect
CreateFileW

advapi32

GetAccessPermissionsForObjectW
AddAuditAccessAce
SetEntriesInAclA
RegEnumKeyA
BuildTrusteeWithSidA
CryptDuplicateHash
CryptSignHashA
ConvertAccessToSecurityDescriptorA
RegDeleteKeyA
CryptExportKey
ObjectOpenAuditAlarmW
RegOpenKeyW
RegGetKeySecurity
CryptDecrypt
GetServiceKeyNameA
ControlService
RegEnumValueA
RegFlushKey
CreateProcessAsUserA
CreateServiceA
GetEffectiveRightsFromAclA
CryptHashSessionKey
ConvertSecurityDescriptorToAccessNamedW
IsValidSecurityDescriptor
GetSidIdentifierAuthority
PrivilegedServiceAuditAlarmW
AllocateAndInitializeSid
GetMultipleTrusteeOperationA
OpenSCManagerA
GetNamedSecurityInfoExW
RegReplaceKeyW
SetSecurityDescriptorDacl
TrusteeAccessToObjectW
GetAclInformation
OpenEventLogW
SetSecurityInfo
GetCurrentHwProfileA
LogonUserW
ChangeServiceConfigW
SetEntriesInAccessListA
FindFirstFreeAce
GetUserNameW
RegDeleteKeyW
GetPrivateObjectSecurity
ReportEventA
GetCurrentHwProfileW
CryptDestroyHash
GetMultipleTrusteeW
ConvertAccessToSecurityDescriptorW
RegLoadKeyW
GetMultipleTrusteeOperationW
MakeAbsoluteSD
DuplicateTokenEx
GetAuditedPermissionsFromAclW
ObjectDeleteAuditAlarmA
ObjectOpenAuditAlarmA
GetSecurityDescriptorOwner
LookupSecurityDescriptorPartsW
GetTokenInformation
GetSecurityDescriptorLength
RegQueryMultipleValuesW
ReportEventW
RegLoadKeyA
RegCreateKeyW
CreatePrivateObjectSecurity
SetNamedSecurityInfoW
EqualSid
GetSecurityDescriptorGroup
BuildTrusteeWithSidW
ClearEventLogA
SetSecurityDescriptorOwner
StartServiceW

ole32

StringFromGUID2
WriteClassStg
UtConvertDvtd16toDvtd32
FreePropVariantArray
CoGetInstanceFromIStorage
OpenOrCreateStream
CoQueryAuthenticationServices
CoGetStandardMarshal
CoCreateInstanceEx
CoTaskMemRealloc
OleGetClipboard
CoFreeAllLibraries
UtGetDvtd32Info
ReadClassStm
UpdateDCOMSettings
OleRun
CreateAntiMoniker
CoRevokeMallocSpy
CoRegisterChannelHook
CreateILockBytesOnHGlobal
CoFreeUnusedLibraries
GetDocumentBitStg
CreateClassMoniker
CoLoadLibrary
OleDraw
CoRegisterSurrogate
OleRegGetMiscStatus
CoTaskMemFree
OleCreateLinkFromDataEx
CoResumeClassObjects
PropVariantClear
UtGetDvtd16Info
CoCopyProxy
OleCreateDefaultHandler
CoGetCallContext
CoGetClassObject
CoGetPSClsid
GetHookInterface
CoGetCurrentLogicalThreadId
OleSave
CreateFileMoniker
DoDragDrop
CoSuspendClassObjects
OleCreateLinkToFileEx
OleCreateFromData
UtConvertDvtd32toDvtd16
RevokeDragDrop
OleBuildVersion
CoRegisterClassObject
OleNoteObjectVisible

shlwapi

StrRetToBufA
PathIsRelativeW
SHEnumValueW
PathCreateFromUrlA
PathIsLFNFileSpecW
StrRetToBufW
PathFileExistsA
PathCompactPathExA
PathIsUNCServerA
SHRegCreateUSKeyW
SHQueryValueExW
PathMatchSpecW
SHCreateShellPalette
SHRegQueryInfoUSKeyW
SHEnumValueA
PathFindFileNameA
SHDeleteValueA
PathQuoteSpacesA
PathIsSystemFolderA
SHRegEnumUSKeyA
PathCanonicalizeA
StrFromTimeIntervalA
PathIsUNCA
StrIsIntlEqualW
PathCanonicalizeW
PathFindExtensionW
PathBuildRootA
StrNCatA
StrCmpIW
PathIsDirectoryEmptyW
PathIsSystemFolderW
PathRemoveBackslashW
SHRegWriteUSValueA
PathIsNetworkPathA
wvnsprintfW
SHCreateStreamOnFileA
SHDeleteKeyA
SHQueryValueExA
PathFindExtensionA
UrlIsA
UrlGetLocationA
SHRegDeleteUSValueA
PathIsDirectoryEmptyA
StrCatBuffA
SHRegGetBoolUSValueW
PathUnquoteSpacesA
PathRemoveExtensionA
PathIsNetworkPathW
PathRemoveFileSpecW
PathIsURLW
SHCreateStreamOnFileW
SHRegEnumUSValueW
SHSetValueW
ChrCmpIA
StrChrW
StrRChrIW
ColorHLSToRGB
SHRegEnumUSValueA
SHRegQueryUSValueA
PathGetDriveNumberW
PathRemoveExtensionW
SHOpenRegStreamW
AssocQueryStringW

user32

GetGuiResources
UnloadKeyboardLayout
EnumPropsA
CallWindowProcA
GetMenuItemRect
LoadCursorFromFileW
CloseWindow
GetKeyState
EndPaint
DrawAnimatedRects
MonitorFromRect
CreateIconFromResourceEx
DrawStateW
EndDialog
SetDoubleClickTime
DdeSetUserHandle
SendNotifyMessageW
MapVirtualKeyA
EnumDisplayDevicesW
DrawEdge
PackDDElParam
MonitorFromPoint
SetMenuDefaultItem
GetKeyboardLayout
GetWindowDC
DestroyWindow
FlashWindow
SetSysColors
CreateDesktopA
GetDlgItemInt
GetCursorPos
ScrollWindowEx
CloseClipboard
GetWindowContextHelpId
EnumDesktopWindows
DefFrameProcA
ChildWindowFromPoint
CharNextW
WINNLSGetEnableStatus
GetClipboardData
CallWindowProcW
DrawTextExW
ReleaseDC
IsRectEmpty
SetActiveWindow
DeleteMenu
DdeConnect
RegisterClassExA
TranslateAcceleratorA
LoadMenuW
DdeQueryStringW
CharPrevExA
EnumDisplaySettingsW
GetGUIThreadInfo
ChangeDisplaySettingsA
RealGetWindowClass
SetWindowsHookExW

Sections

.text
Size: 70KB - Virtual size: 69KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

7829046d72d5f2f1808d70300e72e91e

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

advapi32

ole32

shlwapi

user32

Sections

.text Size: 70KB - Virtual size: 69KB

.rdata Size: 9KB - Virtual size: 8KB

.data Size: 512B - Virtual size: 20KB

.text
Size: 70KB - Virtual size: 69KB

.rdata
Size: 9KB - Virtual size: 8KB

.data
Size: 512B - Virtual size: 20KB