2f23ddf76ac768d8c17b0b2bb5583fd6_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

2f23ddf76ac768d8c17b0b2bb5583fd6_JaffaCakes118
Size

171KB
MD5

2f23ddf76ac768d8c17b0b2bb5583fd6
SHA1

c96c81ab17885dc485c4064aa36aa20ce18f8645
SHA256

d07cf5c696aafe88bb425992e43d437295e656e8ab3f5db49a657736cb889255
SHA512

248dc3bfb7748ac8a91a10aad2a6e53e7eeb25601161f0576851000f127e738c76b3f327e7fbf4cb53f79de2393b4dc8176c38ac3ef87ee0dcca7a9ae9ad6509
SSDEEP

3072:nH4NCxRaDxifWMP5kNqElbjhSc1o765DHVDq9NC69dKrTDVceye9R6P:KCxWifWW5k4EzF1oGDHVDq3ADeeye9kP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2f23ddf76ac768d8c17b0b2bb5583fd6_JaffaCakes118

Files

2f23ddf76ac768d8c17b0b2bb5583fd6_JaffaCakes118
.exe windows:5 windows x86 arch:x86

6aa1d1ccf861a715d3f96799bb98b923

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mpr

WNetAddConnectionW

adsldpc

AllocADsMem
AllocADsStr
ConvertSidToU2Trustee
ADsGetLastError
FreeADsMem
ConvertU2TrusteeToSid
ConvertSidToString
FreeADsStr
ADsSetLastError
GetDomainDNSNameForDomain
ReallocADsMem

advapi32

RevertToSelf
GetFileSecurityW
GetAce
LsaOpenPolicy
GetSecurityDescriptorControl
LookupAccountSidW
AddAce
SetSecurityDescriptorOwner
SetSecurityDescriptorGroup
InitializeSecurityDescriptor
RegOpenKeyExW
ConvertStringSidToSidW
RegQueryValueExW
GetSidIdentifierAuthority
GetAclInformation
RegSetValueExW
InitializeAcl
LsaFreeMemory
MakeSelfRelativeSD
RegDeleteKeyW
LsaNtStatusToWinError
IsValidSid
RegConnectRegistryW
SetSecurityDescriptorSacl
OpenThreadToken
GetSecurityDescriptorOwner
LsaLookupSids
RegEnumKeyExW
GetSecurityDescriptorLength
LookupAccountNameW
GetSecurityDescriptorGroup
SetFileSecurityW
GetLengthSid
SystemFunction041
RegCloseKey
GetSecurityDescriptorSacl
OpenProcessToken
GetSecurityDescriptorDacl
SetSecurityDescriptorDacl
RegCreateKeyExW
RegGetKeySecurity
SystemFunction040
LsaClose
ImpersonateLoggedOnUser
RegSetKeySecurity

ole32

CoInitialize
CLSIDFromProgID
CoGetMalloc
CreatePointerMoniker
StringFromCLSID
CreateBindCtx
CoCreateFreeThreadedMarshaler
CoTaskMemFree
CoCreateInstance
CLSIDFromString
StringFromGUID2
CoTaskMemAlloc

kernel32

GetProcAddress
CloseHandle
GetSystemTimeAsFileTime
LoadLibraryW
FreeLibrary
GetTickCount
FormatMessageW
EnterCriticalSection
LeaveCriticalSection
GetSystemDirectoryW
Sleep
CompareStringW
InterlockedIncrement
GetCurrentThreadId
QueryPerformanceCounter
GetCurrentThread
lstrlenW
DeleteCriticalSection
SetLastError
InitializeCriticalSection
GetCurrentProcessId
TerminateProcess
SetUnhandledExceptionFilter
LocalAlloc
LocalFree
VirtualAlloc
GetLastError
GetCurrentProcess
InterlockedDecrement
UnhandledExceptionFilter
GetVersionExW
DisableThreadLibraryCalls

wsnmp32

SnmpGetTimeout

Sections

.text
Size: 512B - Virtual size: 412B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 144KB - Virtual size: 144KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 848KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 28B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6aa1d1ccf861a715d3f96799bb98b923

Headers

DLL Characteristics

File Characteristics

Imports

mpr

adsldpc

advapi32

ole32

kernel32

wsnmp32

Sections

.text Size: 512B - Virtual size: 412B

.rdata Size: 144KB - Virtual size: 144KB

.rsrc Size: 7KB - Virtual size: 6KB

.idata Size: 18KB - Virtual size: 17KB

.data Size: - Virtual size: 848KB

.reloc Size: 512B - Virtual size: 28B

.text
Size: 512B - Virtual size: 412B

.rdata
Size: 144KB - Virtual size: 144KB

.rsrc
Size: 7KB - Virtual size: 6KB

.idata
Size: 18KB - Virtual size: 17KB

.data
Size: - Virtual size: 848KB

.reloc
Size: 512B - Virtual size: 28B