2642febe924a8f73371686bcb739cc9c_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

2642febe924a8f73371686bcb739cc9c_JaffaCakes118
Size

250KB
MD5

2642febe924a8f73371686bcb739cc9c
SHA1

be843dc796f6fdcf7c31f5980600038ed4a0903d
SHA256

3650e2d33149d8de2c286bfce5708a5caa5f377bf0e7f88d8197a5d077c8a8e9
SHA512

81cd2c0ff37a9fc3ea2538322d7ecbcb2b5636d464cb28dec8237aecc34e9aabca3a2e4cf708d60037ce08251f268b927814e2064230c271442216ee90ff43d9
SSDEEP

6144:Icjlsubtn6BV+/1PSSggDhBkLq2pjMoyYKRKESBv:RiuZ6Bq1aMWqBTSV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2642febe924a8f73371686bcb739cc9c_JaffaCakes118

Files

2642febe924a8f73371686bcb739cc9c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5ac02522db7668811dd224a0577fb68a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

RemoveDirectoryW
CreateEventW
OpenEventW
CloseHandle
FreeLibrary
GetPriorityClass
lstrcpynW
ResetEvent
WaitForMultipleObjects
CreateDirectoryW
GetPrivateProfileStringW
WritePrivateProfileStringW
LocalFree
SetErrorMode
WideCharToMultiByte
OutputDebugStringW
GetModuleHandleW
CreateProcessW
OpenProcess
WaitForSingleObject
SetProcessWorkingSetSize
MulDiv
CreateFileW
DeleteFileW
SetFileAttributesW
WriteFile
LoadLibraryExW
DeviceIoControl
ExpandEnvironmentStringsA
IsDebuggerPresent
UnhandledExceptionFilter
GetSystemTimeAsFileTime
GetCurrentThreadId
SetUnhandledExceptionFilter
PulseEvent
GetLocalTime
GetProcAddress

user32

LoadStringW
KillTimer
PostMessageW
GetSubMenu
SetForegroundWindow
LoadMenuW
AppendMenuW
GetCursorPos
CreatePopupMenu
GetMenuItemCount
RemoveMenu
SetMenuDefaultItem
GetClientRect
RedrawWindow
SetWindowPos
IsWindowVisible
GetDlgCtrlID
GetWindowRect
GetParent
GetDC
ReleaseDC
TranslateAcceleratorW
EnableWindow
SetTimer
PostQuitMessage
RegisterWindowMessageW
LoadImageW
LoadIconW
SendMessageW
UpdateWindow
GetForegroundWindow

gdi32

CreatePatternBrush
DeleteObject
GetObjectW
GetPixel
CreateSolidBrush
CreateCompatibleDC
GetDeviceCaps
RealizePalette
BitBlt
GetDIBColorTable
CreateHalftonePalette
CreateFontIndirectW
GetTextExtentPoint32W
GetStockObject
CreatePalette

advapi32

RegOpenKeyExA
RegQueryValueExA
OpenSCManagerW
OpenServiceW
QueryServiceStatus
StartServiceW
CloseServiceHandle
SetEntriesInAclW
RegDeleteValueW
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
FreeSid
AllocateAndInitializeSid
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
GetUserNameW

shell32

Shell_NotifyIconW
ShellExecuteW

msoert2

PszAllocA

iaspolcy

DllGetClassObject
DllRegisterServer

Sections

.text
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.aeN
Size: 1024B - Virtual size: 1005B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.uJm
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.qQn
Size: 512B - Virtual size: 329B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.wkrcoE
Size: 1KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.SfH
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.oCs
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.iaQU
Size: 512B - Virtual size: 805B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 213KB - Virtual size: 255KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Xij
Size: 1KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.F
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.XSOpU
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5ac02522db7668811dd224a0577fb68a

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

msoert2

iaspolcy

Sections

.text Size: 17KB - Virtual size: 16KB

.aeN Size: 1024B - Virtual size: 1005B

.uJm Size: 1KB - Virtual size: 1KB

.rdata Size: 3KB - Virtual size: 2KB

.qQn Size: 512B - Virtual size: 329B

.wkrcoE Size: 1KB - Virtual size: 2KB

.SfH Size: 1KB - Virtual size: 1KB

.oCs Size: 1024B - Virtual size: 1KB

.iaQU Size: 512B - Virtual size: 805B

.data Size: 213KB - Virtual size: 255KB

.Xij Size: 1KB - Virtual size: 2KB

.F Size: 1024B - Virtual size: 1KB

.XSOpU Size: 2KB - Virtual size: 3KB

.rsrc Size: 3KB - Virtual size: 3KB

.text
Size: 17KB - Virtual size: 16KB

.aeN
Size: 1024B - Virtual size: 1005B

.uJm
Size: 1KB - Virtual size: 1KB

.rdata
Size: 3KB - Virtual size: 2KB

.qQn
Size: 512B - Virtual size: 329B

.wkrcoE
Size: 1KB - Virtual size: 2KB

.SfH
Size: 1KB - Virtual size: 1KB

.oCs
Size: 1024B - Virtual size: 1KB

.iaQU
Size: 512B - Virtual size: 805B

.data
Size: 213KB - Virtual size: 255KB

.Xij
Size: 1KB - Virtual size: 2KB

.F
Size: 1024B - Virtual size: 1KB

.XSOpU
Size: 2KB - Virtual size: 3KB

.rsrc
Size: 3KB - Virtual size: 3KB