0036cd3d99632c12943f08ba601fcd8a_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

0036cd3d99632c12943f08ba601fcd8a_JaffaCakes118
Size

271KB
MD5

0036cd3d99632c12943f08ba601fcd8a
SHA1

bbcf4952190c84117a6f3a9b057f4cff133f3e83
SHA256

c2f1da5bb72705f00de30a0aa165dc0b094dc25a6451ad630dc016da5219f3c9
SHA512

8063b2428f4cc2980819c54c82b637d7df433965517092820e113a23a6c94cdd2f1af42c62fc4717b9001b0098b0df948088a17a0b225f23036039af65dded2a
SSDEEP

6144:83s8GdLOnvz4EiYL9EYxVwNF1sD4ldTQe2IeW+q68q:83TELOnvEE9EYxGFfTZ2G

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0036cd3d99632c12943f08ba601fcd8a_JaffaCakes118

Files

0036cd3d99632c12943f08ba601fcd8a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1c0bbfe43e910f6c9a02b66d60a24a3e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

EnumSystemCodePagesA
ExitProcess
FoldStringW
FreeEnvironmentStringsA
GetCalendarInfoA
GetComputerNameA
GetDateFormatA
GetDriveTypeA
GetPrivateProfileStructW
GetThreadLocale
GetThreadPriority
HeapCreate
SetConsoleActiveScreenBuffer
SetConsoleCursorInfo
SetThreadExecutionState
TryEnterCriticalSection
UTRegister
VirtualAlloc
VirtualUnlock
WritePrivateProfileSectionW
WritePrivateProfileStructW

advapi32

BackupEventLogA
BackupEventLogW
CancelOverlappedAccess
ConvertAccessToSecurityDescriptorA
CreateServiceW
CryptDecrypt
GetExplicitEntriesFromAclA
GetFileSecurityW
GetServiceKeyNameW
GetTrusteeTypeW
InitiateSystemShutdownA
InitiateSystemShutdownW
LookupPrivilegeValueA
OpenEventLogA
RegEnumKeyA
RegQueryInfoKeyW
RegisterServiceCtrlHandlerA
SetKernelObjectSecurity
SetNamedSecurityInfoA
SetSecurityDescriptorDacl

user32

AdjustWindowRectEx
CharLowerBuffW
CheckMenuItem
CopyIcon
DestroyAcceleratorTable
EndDeferWindowPos
EnumDisplayDevicesW
EnumPropsExA
GetKeyboardLayoutNameW
GetMenuItemCount
GetMenuItemInfoA
GetMessageTime
GetTabbedTextExtentA
GetTabbedTextExtentW
InSendMessageEx
IsCharLowerW
LoadMenuW
MapVirtualKeyExA
MoveWindow
PeekMessageA
PostMessageA
RealGetWindowClass
SetKeyboardState
SetWindowContextHelpId
TranslateAccelerator
TranslateAcceleratorA
VkKeyScanA
WaitMessage
keybd_event

Sections

.text
Size: 512B - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 267KB - Virtual size: 288KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 492KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1c0bbfe43e910f6c9a02b66d60a24a3e

Headers

File Characteristics

Imports

kernel32

advapi32

user32

Sections

.text Size: 512B - Virtual size: 16KB

.data Size: 267KB - Virtual size: 288KB

.idata Size: - Virtual size: 4KB

.rsrc Size: 2KB - Virtual size: 492KB

.text
Size: 512B - Virtual size: 16KB

.data
Size: 267KB - Virtual size: 288KB

.idata
Size: - Virtual size: 4KB

.rsrc
Size: 2KB - Virtual size: 492KB