27af4c0545a4ddde54239476f56e340a_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

27af4c0545a4ddde54239476f56e340a_JaffaCakes118
Size

356KB
MD5

27af4c0545a4ddde54239476f56e340a
SHA1

e83dabbc1623c3971f04130f1aa56e9366104c44
SHA256

c90e98c77e936fae363e5d0edf9177406eb16c55bb250aa36833e6a4a14a16c4
SHA512

17875282cf2eb1634d3621c58bae71f53861410ef24b6dbad864ef78d22c343ef33f65789a121e4407ed647c4e0ed496737573c4fa030ccc3397a60069ff67e9
SSDEEP

6144:cEguID4311lEmobf3yOyU1V8routfrPUojrv4onvCGcFldME9esJR6Y3Rg:cvk1wb0rttY0DCGx45Bg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
27af4c0545a4ddde54239476f56e340a_JaffaCakes118

Files

27af4c0545a4ddde54239476f56e340a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4a1bd23ae9331a11b4b393756feea143

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

UnhandledExceptionFilter
ReadDirectoryChangesW
FillConsoleOutputCharacterA
VirtualAlloc
GetVersionExA
GetCommandLineA
SetLastError
GetConsoleCursorInfo
WritePrivateProfileStringW
EraseTape
LocalAlloc
EnumCalendarInfoA
FindFirstFileExW
FindCloseChangeNotification
GetPrivateProfileStringA
LoadLibraryExW
SetConsoleMode
SetHandleCount
GetDriveTypeW
FlushConsoleInputBuffer
TlsGetValue
GetFullPathNameA
GetBinaryTypeW
VirtualAllocEx
WritePrivateProfileSectionW
GlobalReAlloc
ExitProcess
GetFileInformationByHandle
SetConsoleWindowInfo
RemoveDirectoryW
GetUserDefaultLCID
SetVolumeLabelA
OutputDebugStringA
VirtualFree
CreateProcessA
IsBadReadPtr
EndUpdateResourceA
GlobalFree
CreateWaitableTimerA
GetEnvironmentStringsW
GetTempPathW
GetPrivateProfileSectionW
FindResourceExW
VirtualProtect
GetNumberFormatW

user32

GetMenuStringA
BringWindowToTop
LoadIconA
BroadcastSystemMessageW
WinHelpW
PostMessageA
InsertMenuW
SetCaretBlinkTime
WaitForInputIdle
GetMenuCheckMarkDimensions
SetForegroundWindow
GetPropW
OemToCharBuffW
GetWindowLongW
DeleteMenu
GetTabbedTextExtentW

gdi32

CreateBitmapIndirect
StartDocA
SetWindowExtEx
CreateRectRgnIndirect
SetDIBColorTable
CreateDCW
StartPage
CreatePen
SetDIBits
SetBkColor
GetClipBox
SetBitmapDimensionEx
CreateDIBPatternBrush
PatBlt
OffsetWindowOrgEx
SelectPalette

comdlg32

ReplaceTextA
GetOpenFileNameA

advapi32

CryptAcquireContextW
StartServiceCtrlDispatcherA
AddAccessDeniedAce
SetSecurityDescriptorGroup
RegQueryValueW
GetExplicitEntriesFromAclW
RegEnumKeyA
CryptDestroyKey
RegSaveKeyA
GetSidIdentifierAuthority
LookupAccountNameA
RegOpenKeyW
RegSaveKeyW
SetServiceStatus
GetSecurityDescriptorOwner
CreateServiceW

shell32

ExtractIconA

ole32

CoRegisterClassObject
CoUninitialize
OleSaveToStream
CoResumeClassObjects
CoLockObjectExternal
CoCreateInstanceEx
OleIsRunning

comctl32

ImageList_Merge
InitCommonControlsEx
ImageList_ReplaceIcon
ImageList_DrawIndirect

shlwapi

SHQueryValueExW
SHSetThreadRef
StrTrimA
PathGetDriveNumberW
StrTrimW
StrCmpNIW
wnsprintfA
PathAddExtensionW
PathUndecorateW
StrRChrW
StrRChrA
StrRetToStrW
SHDeleteValueW
PathIsUNCA
PathGetCharTypeA

setupapi

SetupScanFileQueueA

Sections

.text
Size: 332KB - Virtual size: 329KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

4a1bd23ae9331a11b4b393756feea143

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

comctl32

shlwapi

setupapi

Sections

.text Size: 332KB - Virtual size: 329KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 16KB - Virtual size: 13KB

.text
Size: 332KB - Virtual size: 329KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 16KB - Virtual size: 13KB