2e4194fbf92c23a9a804ed9fde4d5f3a_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

2e4194fbf92c23a9a804ed9fde4d5f3a_JaffaCakes118
Size

1.0MB
MD5

2e4194fbf92c23a9a804ed9fde4d5f3a
SHA1

7dd5f906e4f7341a6d0c0c42f960eb6ebb0debdc
SHA256

a190d94e334df702ee9622b4ba30a5fd6a9c068c67b207e89e8de2f432fb6501
SHA512

e7388c1548a865b6ecc11ff90e3780f1d59752a6ac8a4654a53dd86726119dc60d14f30bcd986ba596c8c52d9ba9d5e61a819a10833e6784b4e40ba41e4fb0bc
SSDEEP

12288:Gw9ezFXTSvmbZkCkWrs5/mzfi2AJ03eAmJwjUz70NqqqFZ6US62QCo4609UyPcBY:2t1VfkMs5Mi2oFAmJzdbEUyIiFQwzes

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2e4194fbf92c23a9a804ed9fde4d5f3a_JaffaCakes118

Files

2e4194fbf92c23a9a804ed9fde4d5f3a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a54c7acb53d07552cd785d7acfb4c961

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

rasapi32

RasGetHport
RasGetCredentialsW
RasGetCustomAuthDataW
RasConnectionNotificationW
RasValidateEntryNameW
RasSetEapUserDataA
RasDeleteEntryW
RasGetErrorStringW
RasDialW
RasEnumConnectionsW
RasHangUpW
RasEnumConnectionsA
RasSetCustomAuthDataW
RasFreeEapUserIdentityW
RasEnumEntriesW

gdi32

GetTextExtentPointA
ArcTo
RectVisible
GetNearestPaletteIndex
EqualRgn
EngFillPath

advapi32

GetAclInformation
GetSidSubAuthority
LsaICLookupSids
DeleteAce
RegSetValueExA
AreAllAccessesGranted
LsaEnumerateTrustedDomains
GetEffectiveRightsFromAclW
SetEntriesInAclW
AddAuditAccessAce
RegSetValueW
SetTokenInformation
ChangeServiceConfig2W
I_ScSetServiceBitsW
GetCurrentHwProfileA
GetSidLengthRequired
RegisterServiceCtrlHandlerW
GetSidIdentifierAuthority
SystemFunction029
CryptGenKey
RegCreateKeyExW
RegQueryValueExA

uxtheme

DrawThemeBackground
GetThemeAppProperties
GetThemePartSize
SetWindowTheme
GetThemeBackgroundExtent
GetThemeSysFont
GetCurrentThemeName
GetThemeBackgroundRegion
GetThemeFont
CloseThemeData
DrawThemeText

kernel32

SetConsoleCtrlHandler
GetSystemDefaultLCID
GetComputerNameA
ResetEvent
PulseEvent
FlushFileBuffers
GetVersionExW
GetConsoleTitleA
GetCompressedFileSizeW
GetFileAttributesExW
GetSystemWindowsDirectoryW
OpenEventA
GetNamedPipeHandleStateA
CallNamedPipeA
GetProcessTimes
SetEvent
lstrcpynW
SetFileAttributesW
VirtualAlloc
GetProcessIoCounters
EnumResourceTypesW
GetCurrentDirectoryA
GetVolumeNameForVolumeMountPointW
AddAtomA
CreateEventW
RemoveDirectoryA
GetUserDefaultLangID
GetFileTime

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 112KB - Virtual size: 110KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text1
Size: 200KB - Virtual size: 247KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 300KB - Virtual size: 372KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 108KB - Virtual size: 267KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 140KB - Virtual size: 261KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data1
Size: 80KB - Virtual size: 154KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 100KB - Virtual size: 98KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 396B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a54c7acb53d07552cd785d7acfb4c961

Headers

DLL Characteristics

File Characteristics

Imports

rasapi32

gdi32

advapi32

uxtheme

kernel32

Sections

.text Size: 4KB - Virtual size: 4KB

.text Size: 4KB - Virtual size: 4KB

.text Size: 112KB - Virtual size: 110KB

.text1 Size: 200KB - Virtual size: 247KB

.rdata Size: 300KB - Virtual size: 372KB

.data Size: 108KB - Virtual size: 267KB

.idata Size: 140KB - Virtual size: 261KB

.data1 Size: 80KB - Virtual size: 154KB

.rsrc Size: 100KB - Virtual size: 98KB

.reloc Size: 4KB - Virtual size: 396B

.text
Size: 4KB - Virtual size: 4KB

.text
Size: 4KB - Virtual size: 4KB

.text
Size: 112KB - Virtual size: 110KB

.text1
Size: 200KB - Virtual size: 247KB

.rdata
Size: 300KB - Virtual size: 372KB

.data
Size: 108KB - Virtual size: 267KB

.idata
Size: 140KB - Virtual size: 261KB

.data1
Size: 80KB - Virtual size: 154KB

.rsrc
Size: 100KB - Virtual size: 98KB

.reloc
Size: 4KB - Virtual size: 396B