27e6666714014b69395711ec7a873d9b_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

27e6666714014b69395711ec7a873d9b_JaffaCakes118
Size

2.7MB
MD5

27e6666714014b69395711ec7a873d9b
SHA1

1133e928121de02ff6a1006cafd02ec025e955d1
SHA256

20b93caf62ab96586430fbb4555140c45448fac98609f43b0c63c7c301f06730
SHA512

d51d4c6b92ed6b663226ffdbbc9e297d963aa78b04403b4bbb6911acac242dfb01d0f2f9cd597da857d8b79181ea3425528c7dfe4d56e7dd3aec13c3d12a6835
SSDEEP

49152:AH/o2jSdqpddrhcba0deYAXE0kQG0lucuK/EJLs2bjFw2BWc9aG7Lut7Im1Ic35:AfUUpPrhcJ9j0VG0xuBJs+2e9aGnq51D

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
27e6666714014b69395711ec7a873d9b_JaffaCakes118

Files

27e6666714014b69395711ec7a873d9b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b77f917b0f614864a571ff74b0af30c6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

CloseServiceHandle
ControlService
DeleteService
EqualSid
FreeSid
GetTokenInformation
GetUserNameA
LockServiceDatabase
RegDeleteKeyA
RegQueryInfoKeyA
RegSetValueExA
SetSecurityDescriptorDacl

kernel32

AddAtomA
CreateEventA
CreateMutexA
CreateThread
DeleteCriticalSection
DeleteFileA
DeviceIoControl
EnterCriticalSection
ExitProcess
FindFirstFileA
FormatMessageA
FreeLibrary
GetComputerNameA
GetConsoleOutputCP
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetDriveTypeA
GetExitCodeProcess
GetFileTime
GetLastError
GetLocaleInfoA
GetModuleHandleA
GetOEMCP
GetPrivateProfileSectionA
GetPrivateProfileStructA
GetProcAddress
GetProcessHeap
GetStdHandle
GetSystemDirectoryA
GetSystemInfo
GetSystemTimeAsFileTime
GetTempPathA
GetTickCount
GetTimeFormatA
GetVersionExA
GetWindowsDirectoryA
GlobalHandle
HeapAlloc
HeapDestroy
InitializeCriticalSection
InterlockedCompareExchange
InterlockedDecrement
InterlockedExchange
InterlockedIncrement
IsBadCodePtr
IsBadReadPtr
IsDebuggerPresent
IsValidCodePage
LoadLibraryA
LoadLibraryExA
LocalFree
MulDiv
OpenEventA
QueryPerformanceCounter
RaiseException
ReadFile
ReadProcessMemory
RemoveDirectoryA
SearchPathA
SetCurrentDirectoryA
SetErrorMode
SetEvent
SetFileTime
SetLastError
SetPriorityClass
SetStdHandle
SetThreadPriority
SetUnhandledExceptionFilter
Sleep
SuspendThread
TlsAlloc
TlsFree
UnhandledExceptionFilter
VirtualProtect
WideCharToMultiByte
WriteConsoleA
lstrcatA
lstrcmpA
lstrcmpiA
lstrcpynA
lstrlenA

ole32

CLSIDFromProgID
CLSIDFromString
CoFreeUnusedLibraries
CoGetClassObject
CreateBindCtx
OleLoadFromStream

user32

CallWindowProcA
DispatchMessageA
FillRect
GetActiveWindow
GetAsyncKeyState
GetClientRect
GetMessagePos
GetSystemMenu
GetWindowTextA
GetWindowThreadProcessId
IntersectRect
InvalidateRect
LoadBitmapA
LoadStringA
MapWindowPoints
MessageBoxA
PeekMessageA
RegisterClassA
RegisterClassExA
SendDlgItemMessageA
SetMenu
SetRect
SystemParametersInfoA
TrackPopupMenu
UnhookWindowsHookEx

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA

Sections

.text
Size: 39KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 6.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2.6MB - Virtual size: 2.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b77f917b0f614864a571ff74b0af30c6

Headers

File Characteristics

Imports

advapi32

kernel32

ole32

user32

version

Sections

.text Size: 39KB - Virtual size: 40KB

.bss Size: - Virtual size: 6.9MB

.data Size: 2.6MB - Virtual size: 2.6MB

.idata Size: 3KB - Virtual size: 4KB

.rsrc Size: 3KB - Virtual size: 4KB

.text
Size: 39KB - Virtual size: 40KB

.bss
Size: - Virtual size: 6.9MB

.data
Size: 2.6MB - Virtual size: 2.6MB

.idata
Size: 3KB - Virtual size: 4KB

.rsrc
Size: 3KB - Virtual size: 4KB