0f00b280dcc8f515adaae9050a4ef368_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

0f00b280dcc8f515adaae9050a4ef368_JaffaCakes118
Size

61KB
MD5

0f00b280dcc8f515adaae9050a4ef368
SHA1

dc5582f56c75b531bf69fe7585e11fb91bc0c119
SHA256

c7560bb7ea74e5fb6360feea8193f664f73216c7edf69163e102158cd66d6c2f
SHA512

2fdd2f20916b6f0870ed2c81aae9ba36fd2c586758c1544fb2d3bd8d4657d9d4b04b615dbb88e1b9019dee34d3523d140d525ca81c5a97ca81f1057cf420c44f
SSDEEP

1536:VYZELgGCUV1VD3YgaebUE6Dh5vtKGZF1STTET:y+3rV1rFUDfvlSvET

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0f00b280dcc8f515adaae9050a4ef368_JaffaCakes118

Files

0f00b280dcc8f515adaae9050a4ef368_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ae5c95fac6c6312604f044b960cbf032

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateEventA
CreateMutexA
CreateProcessA
CreateToolhelp32Snapshot
DeleteFileA
DuplicateHandle
EnterCriticalSection
ExitProcess
ExpandEnvironmentStringsA
FindNextFileA
FreeLibrary
GetCommandLineA
GetConsoleMode
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetEnvironmentStringsA
GetFileAttributesA
GetFileTime
GetLastError
GetProcAddress
GetProcessHeap
GetStdHandle
GetSystemTimeAsFileTime
GetThreadTimes
GetTickCount
GetTimeZoneInformation
GetVersionExA
GlobalUnlock
HeapFree
InitializeCriticalSection
InterlockedCompareExchange
IsBadReadPtr
IsDebuggerPresent
LCMapStringA
LocalAlloc
MapViewOfFile
MoveFileA
MulDiv
MultiByteToWideChar
OpenEventA
QueryPerformanceCounter
ReleaseMutex
ResumeThread
RtlUnwind
SetEnvironmentVariableA
SetEvent
SetFilePointer
SetHandleCount
SetStdHandle
Sleep
SuspendThread
SystemTimeToFileTime
TlsAlloc
TlsGetValue
UnhandledExceptionFilter
WaitForSingleObject
WriteConsoleA
lstrcmpA
lstrcmpiA

user32

EnumChildWindows
GetDlgCtrlID
GetDlgItemTextA
InflateRect
PtInRect

advapi32

OpenServiceA
RegDeleteKeyA
RegDeleteValueA
RegEnumKeyExA
RegOpenKeyExA
StartServiceA
StartServiceCtrlDispatcherA

Sections

.text
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.DATA
Size: 1024B - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 824B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ae5c95fac6c6312604f044b960cbf032

Headers

File Characteristics

Imports

kernel32

user32

advapi32

Sections

.text Size: 48KB - Virtual size: 47KB

.DATA Size: 1024B - Virtual size: 9KB

.data Size: 8KB - Virtual size: 12KB

.idata Size: 2KB - Virtual size: 4KB

.rsrc Size: 1024B - Virtual size: 824B

.text
Size: 48KB - Virtual size: 47KB

.DATA
Size: 1024B - Virtual size: 9KB

.data
Size: 8KB - Virtual size: 12KB

.idata
Size: 2KB - Virtual size: 4KB

.rsrc
Size: 1024B - Virtual size: 824B