1c25bc398a7ba613429dfa3d57e04729_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

1c25bc398a7ba613429dfa3d57e04729_JaffaCakes118
Size

220KB
MD5

1c25bc398a7ba613429dfa3d57e04729
SHA1

92365754cf2e2c280cb814af8f9ccb34173e44bb
SHA256

27aa786a5aa8eceeab13c61665b3965d20dc72d6e3479e35d924db682c6c6201
SHA512

6a71b145e71d2d14238e95d204c14df0dbf21fd5700af87c5c2469a2c2a889bf08c50d507882c5f7f859d670316a12d2d89f3f4221c5f8e02f64a377ddbe000e
SSDEEP

6144:BznQ04n7NGeh4a2h9RY+h48+OhCiES7zoO6:wUeex9t+oE/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1c25bc398a7ba613429dfa3d57e04729_JaffaCakes118

Files

1c25bc398a7ba613429dfa3d57e04729_JaffaCakes118
.exe windows:4 windows x86 arch:x86

93355997686ad0d8b2729c0634d16f9c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WinExec
GetShortPathNameW
SetCurrentDirectoryW
GetCurrentDirectoryW
lstrcmpiW
GetCommandLineW
SetErrorMode
CopyFileW
lstrcmpW
HeapFree
HeapReAlloc
HeapAlloc
GetComputerNameW
GetLocalTime
GetModuleFileNameW
GetSystemDirectoryW
GetWindowsDirectoryW
WideCharToMultiByte
MultiByteToWideChar
GetTempPathW
GetSystemInfo
GetVersionExW
ExitProcess
GetModuleHandleA
lstrcmpA
CreateToolhelp32Snapshot
Process32FirstW
OpenProcess
Process32NextW
WaitForSingleObject
GetExitCodeThread
CreateRemoteThread
LoadLibraryW
GetProcAddress
GetCurrentProcess
lstrlenW
lstrcpynW
SetFileAttributesW
GetFileSize
lstrlenA
CloseHandle
WriteFile
ReadFile
CreateFileW
FormatMessageW
LocalAlloc
lstrcpyW
LocalFree
GetLastError
GetProcessHeap
GetStartupInfoA

user32

GetSystemMetrics
wsprintfW
IsCharAlphaW
wsprintfA

advapi32

SetServiceStatus
LsaOpenPolicy
LsaNtStatusToWinError
LookupAccountNameW
LsaAddAccountRights
LsaClose
AllocateAndInitializeSid
LookupAccountSidW
FreeSid
StartServiceCtrlDispatcherW
RegisterServiceCtrlHandlerW
OpenSCManagerW
CreateServiceW
OpenServiceW
StartServiceW
CloseServiceHandle
RegCloseKey
RegSetValueExW
RegQueryValueExW
RegCreateKeyExW
AdjustTokenPrivileges
LookupPrivilegeValueW
OpenProcessToken

shell32

CommandLineToArgvW

wininet

InternetConnectW
HttpOpenRequestW
InternetOpenW
InternetCloseHandle
InternetCrackUrlW
HttpSendRequestW

shlwapi

StrRChrW
StrStrW

netapi32

NetLocalGroupAddMembers
NetUserAdd

msvcrt

_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
memcpy
_lrotr
_lrotl
??3@YAXPAX@Z
__CxxFrameHandler
??2@YAPAXI@Z
memset
strchr
strlen
_CxxThrowException
_except_handler3
__dllonexit
_onexit
??1type_info@@UAE@XZ
_exit

msvcp60

?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ID@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??0_Lockit@std@@QAE@XZ
??1_Lockit@std@@QAE@XZ
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ

Sections

.text
Size: 67KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 147KB - Virtual size: 146KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

93355997686ad0d8b2729c0634d16f9c

Headers

File Characteristics

Imports

kernel32

user32

advapi32

shell32

wininet

shlwapi

netapi32

msvcrt

msvcp60

Sections

.text Size: 67KB - Virtual size: 66KB

.rdata Size: 147KB - Virtual size: 146KB

.data Size: 3KB - Virtual size: 3KB

.rsrc Size: 2KB - Virtual size: 1KB

.text
Size: 67KB - Virtual size: 66KB

.rdata
Size: 147KB - Virtual size: 146KB

.data
Size: 3KB - Virtual size: 3KB

.rsrc
Size: 2KB - Virtual size: 1KB