271d99007a793c35de064c2b47d9b2cd_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

271d99007a793c35de064c2b47d9b2cd_JaffaCakes118
Size

254KB
MD5

271d99007a793c35de064c2b47d9b2cd
SHA1

e56fe2c669523db5b81ab54599a1acebf89eec32
SHA256

32f6feb7b67d7c7c10969f730122743cc15c02e200452e1e820cd4fc806d75af
SHA512

05924824d9957b61cf81b754071c6426bbedc37ebf1fa617d947af5abc9120079f7c52cc246992410ea7ad507904f1d0157430d0dddcaa001b1e7943444f4c06
SSDEEP

6144:9uMi5Es47LFP0MHPucwGgcR9oMVE67chiGMUKmMtFWiRaymvOSF:9E5En7hcMHPuagpMBCXKPvRFSF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
271d99007a793c35de064c2b47d9b2cd_JaffaCakes118

Files

271d99007a793c35de064c2b47d9b2cd_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a36a8460e2f54a83bc08a760a786ddaf

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

RemoveDirectoryW
CreateEventW
OpenEventW
CloseHandle
FreeLibrary
GetPriorityClass
lstrcpynW
ResetEvent
WaitForMultipleObjects
CreateDirectoryW
GetPrivateProfileStringW
WritePrivateProfileStringW
LocalFree
SetErrorMode
WideCharToMultiByte
OutputDebugStringW
GetModuleHandleW
CreateProcessW
OpenProcess
WaitForSingleObject
SetProcessWorkingSetSize
MulDiv
CreateFileW
DeleteFileW
SetFileAttributesW
WriteFile
LoadLibraryExW
DeviceIoControl
ExpandEnvironmentStringsA
IsDebuggerPresent
UnhandledExceptionFilter
GetSystemTimeAsFileTime
GetCurrentThreadId
SetUnhandledExceptionFilter
PulseEvent
GetVersion
GetProcAddress

user32

LoadStringW
KillTimer
PostMessageW
GetSubMenu
SetForegroundWindow
LoadMenuW
AppendMenuW
GetCursorPos
CreatePopupMenu
GetMenuItemCount
RemoveMenu
SetMenuDefaultItem
GetClientRect
RedrawWindow
SetWindowPos
IsWindowVisible
GetDlgCtrlID
GetWindowRect
GetParent
GetDC
ReleaseDC
TranslateAcceleratorW
EnableWindow
SetTimer
PostQuitMessage
RegisterWindowMessageW
LoadImageW
LoadIconW
SendMessageW
UpdateWindow
GetForegroundWindow

gdi32

CreatePatternBrush
DeleteObject
GetObjectW
GetPixel
CreateSolidBrush
CreateCompatibleDC
GetDeviceCaps
RealizePalette
BitBlt
GetDIBColorTable
CreateHalftonePalette
CreateFontIndirectW
GetTextExtentPoint32W
GetStockObject
CreatePalette

advapi32

RegOpenKeyExA
RegQueryValueExA
OpenSCManagerW
OpenServiceW
QueryServiceStatus
StartServiceW
CloseServiceHandle
SetEntriesInAclW
RegDeleteValueW
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
FreeSid
AllocateAndInitializeSid
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
GetUserNameW

shell32

Shell_NotifyIconW
ShellExecuteW

msoert2

PszAllocA

mswsock

SetServiceW
WSPStartup
MigrateWinsockConfiguration
StopWsdpService

Sections

.text
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.GRJNtI
Size: 112KB - Virtual size: 208KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pP
Size: 99KB - Virtual size: 126KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a36a8460e2f54a83bc08a760a786ddaf

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

msoert2

mswsock

Sections

.text Size: 29KB - Virtual size: 28KB

.rdata Size: 3KB - Virtual size: 3KB

.GRJNtI Size: 112KB - Virtual size: 208KB

.data Size: 7KB - Virtual size: 38KB

.pP Size: 99KB - Virtual size: 126KB

.rsrc Size: 2KB - Virtual size: 1KB

.text
Size: 29KB - Virtual size: 28KB

.rdata
Size: 3KB - Virtual size: 3KB

.GRJNtI
Size: 112KB - Virtual size: 208KB

.data
Size: 7KB - Virtual size: 38KB

.pP
Size: 99KB - Virtual size: 126KB

.rsrc
Size: 2KB - Virtual size: 1KB