08d2c3805f033b9634462b8df6207d38_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

08d2c3805f033b9634462b8df6207d38_JaffaCakes118
Size

25KB
MD5

08d2c3805f033b9634462b8df6207d38
SHA1

e937340db862ae91734d8ffb1a19e801588ad088
SHA256

4c347fafa0cca00d1aa572f52bf7934e1de62092797fe6ffd487e8a65a841caf
SHA512

50ee018409397d9d2215d567e5bbb6cf7517b334050371bb4d7690295eeae8728bc205a8de767745465491134890cad80f138d7f1502a21ebfc543c0191d09a7
SSDEEP

384:HkH2TJH58q+T+RIe4mXZEDFnInWS4mWIpF0KSm3nTYZJy6:HkWTb8q+TaGDdA3KYwx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
08d2c3805f033b9634462b8df6207d38_JaffaCakes118

Files

08d2c3805f033b9634462b8df6207d38_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f176bc002bc18fb010fb3478a1466f17

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

TerminateProcess
LocalFree
InitializeCriticalSection
GetStartupInfoA
lstrlenW
LeaveCriticalSection
GetSystemTime
SetUnhandledExceptionFilter
LocalFileTimeToFileTime
SetLastError
GetLastError
ReleaseSemaphore
GetSystemTimeAsFileTime
CompareStringW
FileTimeToDosDateTime
InterlockedDecrement
InterlockedIncrement
UnhandledExceptionFilter
FileTimeToSystemTime
GetComputerNameW
FormatMessageW
WaitForSingleObject
GetModuleHandleW
CloseHandle
LoadLibraryW
SystemTimeToTzSpecificLocalTime
CreateSemaphoreW
GetCurrentProcessId
SystemTimeToFileTime
EnterCriticalSection
GetCurrentProcess
FreeLibrary
FileTimeToLocalFileTime
DosDateTimeToFileTime
GetCurrentThreadId
DisableThreadLibraryCalls
GetProcAddress
QueryPerformanceCounter
GetTickCount
LocalAlloc

ole32

CLSIDFromString
CoTaskMemFree
StringFromGUID2
CreatePointerMoniker
CoCreateInstance
IIDFromString
StringFromCLSID

msvcrt

_CxxThrowException
wcscpy
_except_handler3
wcschr
_wtol
_purecall
wcsrchr
wcscmp
_wcsicmp
_wcsnicmp
_ltow
_initterm
malloc
__dllonexit
_adjust_fdiv
_onexit
_ftol
wcslen
_itow
free
wcscat

netapi32

NetUserAdd
NetFileGetInfo
NetLocalGroupGetInfo
NetUserGetGroups
NetGroupGetUsers
NetLocalGroupDelMembers
NetLocalGroupAddMembers
NetLocalGroupDel
NetShareEnum
NetGroupDelUser
NetGetAnyDCName
NetServerSetInfo
NetServerEnum
NetQueryDisplayInformation
NetUserModalsGet
NetShareGetInfo
NetSessionEnum
NetApiBufferFree
NetGroupEnum
NetLocalGroupAdd
NetUserGetInfo
NetShareAdd
NetUserGetLocalGroups
NetUserModalsSet
NetGetDCName
DsRoleFreeMemory
NetUserDel
NetGroupSetInfo
NetGroupDel
NetLocalGroupGetMembers
NetServerGetInfo
DsRoleGetPrimaryDomainInformation
NetWkstaGetInfo
NetGroupAddUser
NetUserChangePassword
NetSessionGetInfo
NetWkstaUserGetInfo
NetUserSetInfo
NetLocalGroupSetInfo
NetShareSetInfo
NetShareDel
NetGroupAdd
NetGroupGetInfo
NetLocalGroupEnum
NetSessionDel
NetUseGetInfo

rpcrt4

RpcStringFreeW

advapi32

RegEnumKeyExW
RegOpenKeyExW
CreateServiceW
GetUserNameW
SystemFunction040
RegConnectRegistryW
StartServiceW
ChangeServiceConfigW
GetSidIdentifierAuthority
RegQueryValueExW
RegCloseKey
SystemFunction041
CloseServiceHandle
EnumServicesStatusW
GetLengthSid
GetSidSubAuthorityCount
UnlockServiceDatabase
DeleteService
OpenServiceW
ControlService
LockServiceDatabase
GetSidSubAuthority
QueryServiceConfigW
OpenSCManagerW
QueryServiceStatus
LookupAccountNameW

ntdll

RtlRunEncodeUnicodeString
NtAllocateVirtualMemory
RtlSecondsSince1970ToTime
RtlAddAccessAllowedAceEx
RtlAdjustPrivilege

oleaut32

VariantCopy

user32

LoadStringW
wsprintfW

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 56B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f176bc002bc18fb010fb3478a1466f17

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

ole32

msvcrt

netapi32

rpcrt4

advapi32

ntdll

oleaut32

user32

Sections

.text Size: 3KB - Virtual size: 2KB

.data Size: 4KB - Virtual size: 80KB

.idata Size: 4KB - Virtual size: 4KB

.rdata Size: 2KB - Virtual size: 1KB

.rsrc Size: 10KB - Virtual size: 9KB

.reloc Size: 512B - Virtual size: 56B

.text
Size: 3KB - Virtual size: 2KB

.data
Size: 4KB - Virtual size: 80KB

.idata
Size: 4KB - Virtual size: 4KB

.rdata
Size: 2KB - Virtual size: 1KB

.rsrc
Size: 10KB - Virtual size: 9KB

.reloc
Size: 512B - Virtual size: 56B