3166baffecccd0934bdc657c01491094_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

3166baffecccd0934bdc657c01491094_JaffaCakes118
Size

76KB
MD5

3166baffecccd0934bdc657c01491094
SHA1

05f66492c163ec2a24c6a87c7a43028c5f632437
SHA256

74b21c62899cd33d8e7ec9de588626b65656b19af814b9c56d23da7969bc226a
SHA512

c5d048188b7a14f0da53e94343f7fd00c5d2697b44ccb2653f0a8b65038bdb91234eb9ee3af0e431ff3e343a8e80cfe487755350307fd2679166fbc3d67fd0a7
SSDEEP

1536:ZslON7/jtG8xMseDB+mutbHGEN5lQYlsopS:ZsstrebulHH5lQYlsopS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3166baffecccd0934bdc657c01491094_JaffaCakes118

Files

3166baffecccd0934bdc657c01491094_JaffaCakes118
.exe windows:4 windows x86 arch:x86

69d080cad584af1c0036b244e97b5b80

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegCloseKey
RegSetValueExA
RegQueryValueExA
RegCreateKeyExA
RegOpenKeyExA
SetSecurityInfo
SetEntriesInAclA
AdjustTokenPrivileges
LookupPrivilegeValueA
GetTokenInformation
OpenProcessToken
GetUserNameA
LookupAccountSidA
RegEnumKeyExA
RegEnumValueA
RegDeleteValueA

kernel32

GetTickCount
CreateThread
DeleteFileA
GetProcAddress
LoadLibraryA
CreateMutexA
Sleep
WaitForSingleObject
CloseHandle
OpenMutexA
GetSystemDefaultLangID
GetComputerNameA
GetVolumeInformationA
GetDriveTypeA
GetLogicalDriveStringsA
LocalFree
GetLastError
DuplicateHandle
GetCurrentProcess
lstrcmpiA
GetPriorityClass
GetFileAttributesA
CreateDirectoryA
FindClose
RemoveDirectoryA
CopyFileA
GetLocalTime
GetFileSize
SetFileTime
GetFileTime
GlobalFree
GlobalAlloc
MultiByteToWideChar
HeapFree
HeapAlloc
GetModuleFileNameA
GetModuleHandleA
CompareStringW
CompareStringA
SetEndOfFile
GetOEMCP
GetACP
SetEnvironmentVariableA
GetCPInfo
CreateFileA
FlushFileBuffers
SetStdHandle
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
WriteFile
SetFilePointer
ReadFile
IsBadWritePtr
HeapReAlloc
RtlUnwind
GetTimeZoneInformation
GetSystemTime
MoveFileA
ExitProcess
TerminateProcess
GetStartupInfoA
GetCommandLineA
GetVersion
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc

shell32

SHGetSpecialFolderPathA

ole32

CoInitialize
CoCreateInstance

wsock32

accept
bind
listen
WSACleanup
htons
ioctlsocket
select
closesocket
recv
gethostname
gethostbyname
getpeername
inet_addr
WSAStartup
inet_ntoa
socket
WSAGetLastError

mpr

WNetCloseEnum

shlwapi

SHSetValueA
SHGetValueA
SHDeleteKeyA

netapi32

NetApiBufferFree
NetGetDCName

Sections

.text
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

69d080cad584af1c0036b244e97b5b80

Headers

File Characteristics

Imports

advapi32

kernel32

shell32

ole32

wsock32

mpr

shlwapi

netapi32

Sections

.text Size: 52KB - Virtual size: 51KB

.rdata Size: 8KB - Virtual size: 4KB

.data Size: 8KB - Virtual size: 15KB

.rsrc Size: 4KB - Virtual size: 3KB

.text
Size: 52KB - Virtual size: 51KB

.rdata
Size: 8KB - Virtual size: 4KB

.data
Size: 8KB - Virtual size: 15KB

.rsrc
Size: 4KB - Virtual size: 3KB