2b87ef673bb9a1c1f4a2c2c0973326f6_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

2b87ef673bb9a1c1f4a2c2c0973326f6_JaffaCakes118
Size

1.5MB
MD5

2b87ef673bb9a1c1f4a2c2c0973326f6
SHA1

0adb55dbe2c11018627d9a186d12f44e694833bc
SHA256

69ab964d83a9a388ed05e6ff05f9b167c034b2352ba025a993945ab83b741253
SHA512

dd60376c834f169b05457fdb3c32a2f334cd46e7f7eb946eaeaf1dde05a6b4acd93a935916d63d8675c58fa0eb26254cce3d7c63c7c03b596bef442afcf63200
SSDEEP

24576:JwCKc4PX8GY6WcIcCOYmZ6iGeu1d5tZ/eqooD67huYGgCCrlvYA2K0SWagoN:Jw7c4PsGYUTYmZj4BGGgJdx0S1goN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2b87ef673bb9a1c1f4a2c2c0973326f6_JaffaCakes118

Files

2b87ef673bb9a1c1f4a2c2c0973326f6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d8f9071e57bb41391d1c06727adc50b0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

AdjustTokenPrivileges
GetSecurityDescriptorControl
GetUserNameA
LockServiceDatabase
LookupPrivilegeValueA
QueryServiceConfig2A
RegCreateKeyExA
RegQueryValueA
RegSetValueExA

kernel32

CompareStringA
ContinueDebugEvent
CopyFileA
CreateEventA
CreateFileA
CreateMutexA
CreateThread
CreateToolhelp32Snapshot
DeleteFileA
DisableThreadLibraryCalls
ExitProcess
ExitThread
FindFirstFileA
FlushFileBuffers
FormatMessageA
FreeLibrary
GetACP
GetCommandLineA
GetConsoleMode
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetDateFormatA
GetFileTime
GetLastError
GetLocaleInfoA
GetModuleFileNameA
GetModuleHandleA
GetPrivateProfileStringA
GetProcessHeap
GetStartupInfoA
GetStdHandle
GetStringTypeA
GetSystemDirectoryA
GetSystemInfo
GetSystemTime
GetTempPathA
GetTickCount
GetVersionExA
GlobalAlloc
GlobalHandle
HeapAlloc
HeapSize
InitializeCriticalSection
InterlockedDecrement
InterlockedExchange
IsBadCodePtr
IsBadWritePtr
IsValidCodePage
IsValidLocale
LeaveCriticalSection
LoadLibraryA
LoadLibraryExA
LocalFree
LockResource
MapViewOfFile
MoveFileA
MoveFileExA
MultiByteToWideChar
OutputDebugStringA
QueryPerformanceCounter
RaiseException
ReadFile
RemoveDirectoryA
RtlUnwind
SetEnvironmentVariableA
SetPriorityClass
SetUnhandledExceptionFilter
TlsAlloc
TlsSetValue
UnmapViewOfFile
VirtualProtect
VirtualQuery
WriteFile
WritePrivateProfileStringA
lstrcpyA
lstrcpynA
lstrlenA

user32

CharNextA
CharPrevA
CopyRect
DestroyWindow
DispatchMessageA
DrawIcon
EnableMenuItem
EnumChildWindows
GetActiveWindow
GetDC
GetDlgItemTextA
GetMessagePos
GetSystemMenu
GetSystemMetrics
GetWindowDC
GetWindowLongA
GetWindowTextLengthA
IsWindowEnabled
LoadStringA
MessageBeep
MessageBoxA
MsgWaitForMultipleObjects
PostMessageA
RegisterWindowMessageA
ReleaseDC
SetCapture
SetDlgItemTextA
SetRect
SetWindowRgn
UpdateWindow

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA

Sections

.text
Size: 27KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: 1.4MB - Virtual size: 20.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 63KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

dwupu
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

dujdp
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d8f9071e57bb41391d1c06727adc50b0

Headers

File Characteristics

Imports

advapi32

kernel32

user32

version

Sections

.text Size: 27KB - Virtual size: 28KB

.bss Size: 1.4MB - Virtual size: 20.1MB

.data Size: 512B - Virtual size: 4KB

.rdata Size: 15KB - Virtual size: 16KB

.idata Size: 3KB - Virtual size: 4KB

.tls Size: 512B - Virtual size: 4KB

.rsrc Size: 63KB - Virtual size: 64KB

dwupu Size: 1024B - Virtual size: 4KB

dujdp Size: 1KB - Virtual size: 4KB

.text
Size: 27KB - Virtual size: 28KB

.bss
Size: 1.4MB - Virtual size: 20.1MB

.data
Size: 512B - Virtual size: 4KB

.rdata
Size: 15KB - Virtual size: 16KB

.idata
Size: 3KB - Virtual size: 4KB

.tls
Size: 512B - Virtual size: 4KB

.rsrc
Size: 63KB - Virtual size: 64KB

dwupu
Size: 1024B - Virtual size: 4KB

dujdp
Size: 1KB - Virtual size: 4KB