27a8bb73022191f01ee72cff98f9615a_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

27a8bb73022191f01ee72cff98f9615a_JaffaCakes118
Size

35KB
MD5

27a8bb73022191f01ee72cff98f9615a
SHA1

1b563285b0b93136dc1f068a46d29d78495171d1
SHA256

8182affbdc7784bb828be99d3125e9641821fef3fa3b36f978e7b23e2b49ec6b
SHA512

1bcfa043fb00f695e40d490069db92e3a247b41296e7f025d9013817d1afea8a649816ea6e4daff1f29e1a9bc44e27772b1d4730b3e23c5bab1269d1a4d807db
SSDEEP

768:tzavuS0FVjk/kuZib+d1NMd7PpaRUa3/e9jn:xav4TNCuMUC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
27a8bb73022191f01ee72cff98f9615a_JaffaCakes118

Files

27a8bb73022191f01ee72cff98f9615a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

693ff892b92ba06b56d0a50bf71d6d57

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

AdjustTokenPrivileges
AllocateLocallyUniqueId
BuildImpersonateTrusteeA
ChangeServiceConfig2W
CloseServiceHandle
CreatePrivateObjectSecurityEx
CryptGenKey
CryptGenRandom
CryptSetProviderW
DeregisterEventSource
ElfBackupEventLogFileA
ElfChangeNotify
ElfClearEventLogFileA
ElfOpenBackupEventLogA
FreeSid
GetAclInformation
GetAuditedPermissionsFromAclA
I_ScSetServiceBitsA
IsTokenRestricted
LookupAccountNameA
LookupPrivilegeDisplayNameW
LookupSecurityDescriptorPartsW
LsaDeleteTrustedDomain
LsaStorePrivateData
ReportEventW
RevertToSelf
SetNamedSecurityInfoW

kernel32

BeginUpdateResourceA
BuildCommDCBAndTimeoutsA
CloseHandle
CmdBatNotification
CommConfigDialogA
ContinueDebugEvent
ConvertDefaultLocale
CreateEventA
CreateFileMappingW
CreateMutexW
CreateNamedPipeA
CreatePipe
CreateRemoteThread
CreateToolhelp32Snapshot
DisableThreadLibraryCalls
EndUpdateResourceA
EnumResourceNamesW
ExitProcess
ExpungeConsoleCommandHistoryW
FatalExit
FindNextFileA
FreeConsole
GetAtomNameW
GetCommandLineW
GetConsoleAliasExesLengthA
GetConsoleCommandHistoryLengthA
GetConsoleDisplayMode
GetConsoleFontInfo
GetConsoleWindow
GetCurrentDirectoryA
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetDefaultCommConfigW
GetDevicePowerState
GetDriveTypeW
GetEnvironmentStringsA
GetLargestConsoleWindowSize
GetLastError
GetLocalTime
GetModuleHandleW
GetNumberFormatW
GetNumberOfConsoleFonts
GetPrivateProfileSectionNamesA
GetProcessHeaps
GetShortPathNameA
GetStartupInfoW
GetStringTypeW
GetSystemDirectoryA
GetSystemInfo
GetSystemTime
GetSystemTimeAdjustment
GetTempFileNameA
GetTempFileNameW
GetVersion
GlobalAddAtomW
GlobalHandle
GlobalWire
InitAtomTable
IsBadReadPtr
LoadModule
LocalCompact
LocalShrink
LocalUnlock
LockFileEx
LockResource
Module32Next
MoveFileExW
PostQueuedCompletionStatus
QueryDosDeviceW
ReadConsoleA
RegisterConsoleVDM
RegisterWowExec
RemoveDirectoryA
RtlMoveMemory
SetCommMask
SetConsoleIcon
SetConsoleInputExeNameA
SetConsoleMaximumWindowSize
SetConsoleOutputCP
SetCurrentDirectoryW
SetErrorMode
SetFileAttributesA
SetHandleCount
SetHandleInformation
SetLastError
SetPriorityClass
SetProcessAffinityMask
SetTapeParameters
SetThreadAffinityMask
SignalObjectAndWait
Sleep
SleepEx
SwitchToThread
SystemTimeToTzSpecificLocalTime
VerifyConsoleIoHandle
VirtualFree
VirtualProtect
WaitForMultipleObjects
WaitForSingleObject
WaitForSingleObjectEx
WriteConsoleInputA
WriteConsoleInputVDMA
WriteConsoleInputVDMW
WritePrivateProfileStringW
WritePrivateProfileStructW
WriteTapemark
_hread
_lwrite
lstrcmpA
lstrcmpW
lstrcmpiA
lstrcmpiW
lstrcpynW
lstrlenA

user32

AnyPopup
ChangeDisplaySettingsW
CharLowerA
CharUpperA
CharUpperW
CloseClipboard
CreateCaret
CreateCursor
CreateDialogParamW
CreateIconFromResource
DdeCmpStringHandles
DefFrameProcW
DeferWindowPos
DestroyAcceleratorTable
DialogBoxParamW
DispatchMessageA
DlgDirListComboBoxA
DlgDirSelectComboBoxExW
DrawFocusRect
EndPaint
EnumChildWindows
EnumPropsA
EnumWindows
EqualRect
GetActiveWindow
GetAltTabInfoW
GetClientRect
GetClipCursor
GetClipboardFormatNameW
GetComboBoxInfo
GetCursor
GetCursorInfo
GetDialogBaseUnits
GetFocus
GetForegroundWindow
GetMenu
GetMenuItemID
GetMenuStringA
GetMessageA
GetParent
GetSysColorBrush
GetTabbedTextExtentA
GetTitleBarInfo
GetTopWindow
GetUpdateRgn
GetWindowDC
GetWindowTextA
GetWindowWord
GrayStringW
IsMenu
MessageBoxW
MessageBoxExA
MessageBoxIndirectA
OpenIcon
PaintDesktop
PtInRect
RealChildWindowFromPoint
RegisterClassA
ReleaseCapture
RemovePropW
ReplyMessage
ScreenToClient
SetCaretBlinkTime
SetDebugErrorLevel
SetDlgItemInt
SetMenu
SetProcessWindowStation
SetWindowPos
ShowCursor
TabbedTextOutA
TileChildWindows
TileWindows
ToAscii
TranslateMessage
UnloadKeyboardLayout
ValidateRect
WaitForInputIdle

gdi32

CreateCompatibleBitmap
CreateFontIndirectA
CreateHatchBrush
CreateICW
CreateRoundRectRgn
CreateScalableFontResourceW
DeleteEnhMetaFile
Ellipse
EndPage
EndPath
ExtFloodFill
ExtSelectClipRgn
GdiComment
GdiGetBatchLimit
GdiPlayDCScript
GetBkColor
GetBkMode
GetBoundsRect
GetCharABCWidthsFloatW
GetClipBox
GetClipRgn
GetColorSpace
GetCurrentObject
GetCurrentPositionEx
GetEnhMetaFileDescriptionA
GetEnhMetaFileHeader
GetGraphicsMode
GetOutlineTextMetricsA
GetOutlineTextMetricsW
GetPixel
GetPixelFormat
GetSystemPaletteEntries
OffsetClipRgn
OffsetWindowOrgEx
PlgBlt
PolyPolygon
PolyTextOutW
Polygon
PtInRegion
RemoveFontResourceA
SetFontEnumeration
SetROP2
SetRectRgn
SetTextCharacterExtra
SetWinMetaFileBits
SetWorldTransform
StartDocA

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 19KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pzDh
Size: 4KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.eYTm
Size: 4KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

693ff892b92ba06b56d0a50bf71d6d57

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

kernel32

user32

gdi32

Sections

.text Size: 5KB - Virtual size: 5KB

.data Size: 19KB - Virtual size: 29KB

.pzDh Size: 4KB - Virtual size: 10KB

.eYTm Size: 4KB - Virtual size: 14KB

.reloc Size: 1024B - Virtual size: 8KB

.text
Size: 5KB - Virtual size: 5KB

.data
Size: 19KB - Virtual size: 29KB

.pzDh
Size: 4KB - Virtual size: 10KB

.eYTm
Size: 4KB - Virtual size: 14KB

.reloc
Size: 1024B - Virtual size: 8KB