1ba865728fa00df8268cf3d1b7f0180e_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

1ba865728fa00df8268cf3d1b7f0180e_JaffaCakes118
Size

175KB
MD5

1ba865728fa00df8268cf3d1b7f0180e
SHA1

fd1658ce87da609d14fffeaeaab0167dc07a8130
SHA256

4bc6eb2f58e61595cd230d99152fc1783503480ca0a3646e06055866ec77d865
SHA512

ed847a7389338fe9357ab25602dd58783760aa2c79091341a921d5211e3b763dff12cfddab57539de65ea61a73ec534f17ca004a6af6de9ca246978c32cc6e81
SSDEEP

3072:4+iaU9XA93u2yQ4uTVzcDTvguDIreouo6EMpNNKR+VxiIyWcgmtWheFVLlWr3qaM:sQVqZYKZDItPyNNC+VkIy2G/VL0bZaL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1ba865728fa00df8268cf3d1b7f0180e_JaffaCakes118

Files

1ba865728fa00df8268cf3d1b7f0180e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8f9bd3cbef5d8ed71551ccc6f7d6e3f4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FormatMessageW
VirtualAlloc
WriteFile
SetErrorMode
CreateWaitableTimerA
PeekConsoleInputW
WriteConsoleOutputCharacterA
CreateIoCompletionPort
GetThreadPriority
WaitNamedPipeA
LocalFileTimeToFileTime
SetEnvironmentVariableA
LoadResource
GetModuleHandleA
GetStartupInfoA

user32

EnumClipboardFormats
EnumDesktopsA
CallNextHookEx
GrayStringA
ChildWindowFromPointEx
SetRectEmpty
GetWindowRect
UpdateWindow
GetMenuItemInfoA
EnumDisplayDevicesA

gdi32

WidenPath
SetPolyFillMode
GetBkMode
GetStockObject

advapi32

SetServiceObjectSecurity
CryptGetProvParam
OpenSCManagerW
EnumDependentServicesW
ImpersonateSelf
CryptDestroyKey
StartServiceA
GetAclInformation
EnumServicesStatusW
GetSecurityDescriptorControl
QueryServiceObjectSecurity
DeleteAce
OpenSCManagerA
NotifyBootConfigStatus
CreateServiceW

comctl32

PropertySheetA
ImageList_Replace
ImageList_DragEnter

version

VerQueryValueA
VerInstallFileA
GetFileVersionInfoSizeA

ws2_32

WSAAccept
getprotobynumber
sendto
recv
WSALookupServiceEnd
WSAGetServiceClassNameByClassIdW

msvcrt

_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
_controlfp
_wmakepath
isupper
_beginthreadex
_snwprintf
_execlp
_fstat
__p___argc
iswcntrl
setbuf
_getdrive
towupper
_strcmpi
getc
_getdcwd

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 208KB - Virtual size: 207KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

8f9bd3cbef5d8ed71551ccc6f7d6e3f4

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

comctl32

version

ws2_32

msvcrt

Sections

.text Size: 3KB - Virtual size: 3KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 208KB - Virtual size: 207KB

.text
Size: 3KB - Virtual size: 3KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 208KB - Virtual size: 207KB