08b899c40964848a4f8acc14d4fe2093_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

08b899c40964848a4f8acc14d4fe2093_JaffaCakes118
Size

285KB
MD5

08b899c40964848a4f8acc14d4fe2093
SHA1

11ed14289db1d711281cc75c3b593235eea26451
SHA256

a793eb85aca390d04c8b54b893afbb9eb7ca56ee632f5b9a9415ff067987d0c5
SHA512

add4ffb11a4a40809a9d2a4cf0251f4531c0e23ebd2ec6a1494a2267286fd6e80f6c7510d8c50b988b91c63398b7f355b49567514a7c19e760a1f9b7fd1c8e40
SSDEEP

6144:G4f66e8dil3JjrZedrXJtgaXvgwFy0NQ5IYovIb6bOQRjfUrYSQt:G4f6f8dSNledrUggszqoP1l8ry

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
08b899c40964848a4f8acc14d4fe2093_JaffaCakes118

Files

08b899c40964848a4f8acc14d4fe2093_JaffaCakes118
.exe windows:6 windows x86 arch:x86

e128ab86a3a7a18470efce2494255975

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

hid

HidD_GetProductString
HidD_GetHidGuid
HidP_GetUsageValue

kernel32

VirtualAlloc
DeleteCriticalSection
SetWaitableTimer
InterlockedDecrement
WaitForMultipleObjectsEx
SetEvent
UnmapViewOfFile
SetProcessShutdownParameters
EnterCriticalSection
GetProcAddress
WaitForMultipleObjects
GetSystemDirectoryW
CloseHandle
GetCurrentThread
GetCurrentThreadId
OpenEventW
GetCommandLineW
InitializeCriticalSectionAndSpinCount
QueueUserAPC
SetThreadPriority
CancelIo
CreateMutexW
WaitForSingleObject
GetTickCount
InitializeCriticalSection
GetTickCount
lstrlenW
CreateEventW
VerifyVersionInfoW
HeapAlloc
LocalFree
VirtualFree
CloseHandle
CreateFileW
GetEnvironmentStrings

msvcrt

__dllonexit
__CxxFrameHandler
exit
wcstol
_onexit
swscanf
_controlfp
_except_handler3
_initterm
_cexit
wcscpy
_vsnwprintf
_beginthreadex
?terminate@@YAXXZ
??1type_info@@UAE@XZ
_c_exit
_wfopen
free
__wgetmainargs
_adjust_fdiv
wcslen

ole32

CoUninitialize
CoTaskMemAlloc
CoCreateInstance

gdi32

DeleteDC
GetDeviceCaps
DeleteObject
CreateCompatibleDC

setupapi

SetupDiEnumDeviceInterfaces
SetupDiGetClassDevsExW
SetupDiGetDeviceInterfaceDetailW

atl

ord32
ord30
ord44
ord16
ord58
ord20

advapi32

RegCreateKeyExW
OpenThreadToken
RegCloseKey
RegOpenKeyW
GetTokenInformation
SetSecurityDescriptorGroup
SetSecurityDescriptorDacl
RegOpenKeyExW

user32

IsWindow
IntersectRect
EnumDisplayMonitors
GetClientRect
MoveWindow
GetDoubleClickTime
RegisterWindowMessageW
CreateWindowExW
LoadStringW
LoadImageW
GetAncestor
GetMessageW
CallNextHookEx
CharNextW
DestroyIcon
SetWindowsHookExW
RegisterDeviceNotificationW
DestroyWindow
GetWindowLongW
OpenInputDesktop
EqualRect

Sections

.text
Size: 218KB - Virtual size: 218KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 30KB - Virtual size: 528KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e128ab86a3a7a18470efce2494255975

Headers

DLL Characteristics

File Characteristics

Imports

hid

kernel32

msvcrt

ole32

gdi32

setupapi

atl

advapi32

user32

Sections

.text Size: 218KB - Virtual size: 218KB

.data Size: 35KB - Virtual size: 35KB

.rsrc Size: 30KB - Virtual size: 528KB

.text
Size: 218KB - Virtual size: 218KB

.data
Size: 35KB - Virtual size: 35KB

.rsrc
Size: 30KB - Virtual size: 528KB