1b0968886687665e1e30210f2e941170_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

1b0968886687665e1e30210f2e941170_JaffaCakes118
Size

276KB
MD5

1b0968886687665e1e30210f2e941170
SHA1

8fd816d21abfc3c3ccb4e3feb12924f531ba0ac4
SHA256

7c768af75a68521ee2cab8b27663902735a9ea63b31f7fb8827b05d8fe3f83b4
SHA512

1134c22496235ff3a34b6b568891ff88bc7bcd46650dea6b61014f2acbede85673812a4fb4cbdbd2043a4f3a18d8d54b8ad0ae2db210368811b6364228aded45
SSDEEP

6144:eH/T30pT5BwQcXqYIbrTa03LlPbUWFjYsMKtHcsh:eH/T30pVBQXya035TUWyOpHh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1b0968886687665e1e30210f2e941170_JaffaCakes118

Files

1b0968886687665e1e30210f2e941170_JaffaCakes118
.exe windows:4 windows x86 arch:x86

41d29e2cbf9a957289b64789f79c1a0e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ConnectNamedPipe
lstrlenA
OutputDebugStringA
IsBadWritePtr
IsBadStringPtrA
IsBadReadPtr
GetVersionExA
GetTickCount
GetSystemInfo
GetStartupInfoA
GetLocalTime
GetHandleInformation
GetFileTime
GetFileSize
GetCurrentThreadId
GetComputerNameA
GetCommandLineA
GetACP
FreeLibrary
LoadLibraryA
lstrcpynA
lstrcmpiA
lstrcmpA
lstrcpyA
lstrcatA
SetEnvironmentVariableA
FreeEnvironmentStringsA
GetEnvironmentStrings
SetTimeZoneInformation
GetTimeZoneInformation
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InterlockedCompareExchange
InterlockedIncrement
GlobalUnlock
SetEvent
GlobalReAlloc
ExitThread
ExitProcess
CreateThread
GlobalFindAtomA
GlobalDeleteAtom
GlobalAddAtomA
DeleteAtom
AddAtomA
GetWindowsDirectoryA
DeleteFileA
SetFilePointer
FlushFileBuffers
CloseHandle
CreateFileA
CopyFileA
WaitForSingleObjectEx
WaitForSingleObject
SetThreadPriority
ResetEvent
OpenEventA
MoveFileA
HeapReAlloc
TlsGetValue
TlsSetValue
TlsFree
TlsAlloc
GetCurrentProcessId
GetModuleHandleA
GetSystemTimeAdjustment
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
VirtualAlloc
GetOEMCP
GetCPInfo
DisconnectNamedPipe
CreateEventA
CreateNamedPipeA
WaitForMultipleObjects
GetOverlappedResult
ReadFile
GetLastError
WriteFile
HeapFree
GetProcessHeap
GlobalLock
HeapAlloc
RtlUnwind
VirtualFree
HeapCreate
HeapDestroy
GetFileType
GetStdHandle
SetHandleCount
GetProcAddress
GetVersion
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
GetStringTypeW

user32

KillTimer
MessageBoxA
SetTimer
wsprintfA
GetParent
GetWindowTextLengthA

advapi32

FreeSid
GetLengthSid
GetTokenInformation
InitializeSecurityDescriptor
RegCloseKey
RegCreateKeyExA
RegEnumValueA
RegQueryValueExA
RegOpenKeyA
RegNotifyChangeKeyValue
AllocateAndInitializeSid

shell32

CommandLineToArgvW

ole32

CoUninitialize
CoInitialize
OleRun
CoGetMalloc

Sections

.code
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 244KB - Virtual size: 2.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

41d29e2cbf9a957289b64789f79c1a0e

Headers

File Characteristics

Imports

kernel32

user32

advapi32

shell32

ole32

Sections

.code Size: 8KB - Virtual size: 4KB

.text Size: 12KB - Virtual size: 10KB

.rdata Size: 8KB - Virtual size: 4KB

.data Size: 244KB - Virtual size: 2.2MB

.code
Size: 8KB - Virtual size: 4KB

.text
Size: 12KB - Virtual size: 10KB

.rdata
Size: 8KB - Virtual size: 4KB

.data
Size: 244KB - Virtual size: 2.2MB