22a15f3838a527c79b62c8e49f6f0857_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

22a15f3838a527c79b62c8e49f6f0857_JaffaCakes118
Size

252KB
MD5

22a15f3838a527c79b62c8e49f6f0857
SHA1

ea2f9dfd42c1c08979c6e0efe3c6dfb0660aa77a
SHA256

9e0b438de2c44294a73bf83953a92c9a8d17aaaab20fdb59a56ad7c32a1ea5ae
SHA512

95b8721111d82fcea25ae34d49a336ee902045264da4018addbf2548b613c8e51d086150818878127fd4eceaed82284c29a0bf90430610ee5d4976f63672a86b
SSDEEP

6144:QxAKsK2gXj9fpmtjIVbcbt7/WInXRNSVUSkol2XfGI:AUKBXsjIVbIXRM4G

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
22a15f3838a527c79b62c8e49f6f0857_JaffaCakes118

Files

22a15f3838a527c79b62c8e49f6f0857_JaffaCakes118
.exe windows:4 windows x86 arch:x86

596ff665d82a062cacf7687e8c6a5324

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentProcess
GetModuleHandleA
ExitThread
SetThreadPriority
GetCurrentThread
GetCurrentProcessId
ExitProcess
CreateMutexA
GetDriveTypeA
GetLogicalDriveStringsA
FindClose
FindNextFileA
FindFirstFileA
HeapReAlloc
VirtualAlloc
VirtualFree
GetFileAttributesA
MoveFileA
LoadLibraryA
GetProcAddress
FreeLibrary
GetModuleFileNameA
TerminateThread
CreateThread
lstrcmpiA
GetTickCount
GetFileSize
CloseHandle
DeleteFileA
RaiseException
GetLocalTime
lstrcpynA
GetSystemDirectoryA
CreateDirectoryA
lstrcmpA
GetComputerNameA
GetProcessTimes
CreateProcessA
GetVersionExA
GetTempFileNameA
GetTempPathA
WinExec
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
GetExitCodeThread
InitializeCriticalSection
SystemTimeToFileTime
FileTimeToSystemTime
FileTimeToLocalFileTime
CreateEventA
SetEvent
WaitForSingleObject
RtlUnwind
MultiByteToWideChar
LCMapStringW
LCMapStringA
WideCharToMultiByte
HeapAlloc
HeapFree
GetSystemTime
ReadFile
lstrlenA
GlobalAlloc
SetFilePointer
WriteFile
GlobalFree
CreateFileA
Sleep
lstrcpyA
lstrcatA
GetLastError

user32

CharLowerA
wvsprintfA
wsprintfA

advapi32

InitializeAcl
RegOpenKeyExA
GetUserNameA
RegQueryValueExA
CloseEventLog
ReadEventLogA
OpenEventLogA
RegDeleteKeyA
RegSetValueExA
IsValidAcl
ControlService
ChangeServiceConfigA
OpenSCManagerA
OpenServiceA
DeleteService
CloseServiceHandle
RegCreateKeyA
RegEnumValueA
RegDeleteValueA
RegCloseKey

ole32

CoInitialize
CoUninitialize
CoCreateGuid
StringFromCLSID
CoCreateInstance
CoInitializeSecurity

oleaut32

VariantInit
VariantClear

ws2_32

gethostbyname
WSACleanup
gethostname
inet_ntoa
htons
connect
recv
getpeername
send
setsockopt
accept
socket
closesocket
select
ioctlsocket
shutdown
WSAGetLastError
bind
listen
WSAStartup

Sections

.text
Size: 113KB - Virtual size: 112KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 41KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

596ff665d82a062cacf7687e8c6a5324

Headers

File Characteristics

Imports

kernel32

user32

advapi32

ole32

oleaut32

ws2_32

Sections

.text Size: 113KB - Virtual size: 112KB

.data Size: 41KB - Virtual size: 59KB

.text
Size: 113KB - Virtual size: 112KB

.data
Size: 41KB - Virtual size: 59KB