4dc7ae1f5b84cc4dbe580c0f9654d9b9_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

4dc7ae1f5b84cc4dbe580c0f9654d9b9_JaffaCakes118
Size

76KB
MD5

4dc7ae1f5b84cc4dbe580c0f9654d9b9
SHA1

605f8573822ec391c1deeea093d2af27a6b6f717
SHA256

af74b053c3c3e6e86e41c664daf6890ae35cc4e07636f1a4660a406aea77ac83
SHA512

8189183bb135c3929cbfe41679fc6d66baac9c31ffe18a3c1eb9c63ea040be6111e9ca9972b40dca5c37342e4f65882916a487bb89732b6404a7cc7e2e041fb6
SSDEEP

1536:CkGB8nHbKUvryElSpi8jCZGcqDKlRwr8daYyMvbCElJWEB:CFBMHRvrAjCZmKfwr8hve+WEB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4dc7ae1f5b84cc4dbe580c0f9654d9b9_JaffaCakes118

Files

4dc7ae1f5b84cc4dbe580c0f9654d9b9_JaffaCakes118
.exe windows:5 windows x86 arch:x86

87ad89b2b3790dfb8f2f6649544dc95d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mpr

WNetOpenEnumW
WNetEnumResourceW
WNetCloseEnum

ws2_32

htonl

kernel32

WaitForMultipleObjects
CloseHandle
CreateThread
SetEvent
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
ResetEvent
CreateEventW
DeleteCriticalSection
CreateMutexW
CreateProcessW
GetCurrentProcess
SetHandleInformation
OpenProcess
GetLocaleInfoW
TerminateProcess
OpenMutexW
GetProcAddress
Process32FirstW
GetExitCodeThread
CreatePipe
CreateFileW
GetModuleHandleA
CreateToolhelp32Snapshot
ReleaseMutex
GetVersion
GetVolumeInformationW
ExpandEnvironmentStringsW
GetModuleFileNameW
FindClose
FindNextFileW
FindFirstFileW
SetEndOfFile
SetFilePointerEx
GetFileAttributesW
ReadFile
GetFileSizeEx
MoveFileW
DeleteFileW
SetFileAttributesW
IsDebuggerPresent
CopyFileW
Sleep
TerminateThread
HeapSize
WriteFile
GetTickCount
GetLogicalDrives
GetComputerNameW
WaitForSingleObject
LoadLibraryW
MultiByteToWideChar
RtlUnwind
Process32NextW
UnhandledExceptionFilter
GetSystemTimeAsFileTime
GetLastError
HeapFree
HeapAlloc
HeapReAlloc
GetCommandLineA
HeapSetInformation
GetStartupInfoW
HeapCreate
GetModuleHandleW
ExitProcess
DecodePointer
GetStdHandle
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
IsProcessorFeaturePresent
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LCMapStringW
GetStringTypeW
SetUnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetCurrentProcessId

user32

GetShellWindow
GetWindowThreadProcessId

advapi32

DuplicateTokenEx
CryptDecrypt
CryptDestroyKey
CryptEncrypt
CryptImportKey
CryptGenRandom
CryptSetKeyParam
CryptAcquireContextW
RegSetValueExW
RegCloseKey
RegOpenKeyExW
RegQueryValueExW
GetTokenInformation
OpenProcessToken

shell32

ShellExecuteExW

ole32

OleLoad

Sections

.text
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.cdata
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.l1
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.texty2:
Size: 512B - Virtual size: 6B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

@G^Kic
Size: 512B - Virtual size: 32B

Sharing

General

Malware Config

Signatures

Files

87ad89b2b3790dfb8f2f6649544dc95d

Headers

DLL Characteristics

File Characteristics

Imports

mpr

ws2_32

kernel32

user32

advapi32

shell32

ole32

Sections

.text Size: 39KB - Virtual size: 38KB

.rdata Size: 9KB - Virtual size: 9KB

.data Size: 4KB - Virtual size: 7KB

.rsrc Size: 512B - Virtual size: 436B

.reloc Size: 3KB - Virtual size: 2KB

.cdata Size: 13KB - Virtual size: 13KB

.l1 Size: 5KB - Virtual size: 5KB

.texty2: Size: 512B - Virtual size: 6B

@G^Kic Size: 512B - Virtual size: 32B

.text
Size: 39KB - Virtual size: 38KB

.rdata
Size: 9KB - Virtual size: 9KB

.data
Size: 4KB - Virtual size: 7KB

.rsrc
Size: 512B - Virtual size: 436B

.reloc
Size: 3KB - Virtual size: 2KB

.cdata
Size: 13KB - Virtual size: 13KB

.l1
Size: 5KB - Virtual size: 5KB

.texty2:
Size: 512B - Virtual size: 6B

@G^Kic
Size: 512B - Virtual size: 32B