37a1eb14df8235e36880b74868cf359a_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

37a1eb14df8235e36880b74868cf359a_JaffaCakes118
Size

268KB
MD5

37a1eb14df8235e36880b74868cf359a
SHA1

0bab3506640943ad6344cf833a07b871726817f0
SHA256

796c91d9ba986f74bdaa66ab7d8a0233483085e5df8b88abcbc7e38b4afd4a42
SHA512

515de31d6364cab69301cc6684831ecff5e4b63ee0c0b58021293276afdebef66154fc17ea2c08a5ca5cc29244a1e300b38759afe07c9c9ef6a474d789692dc7
SSDEEP

3072:yCiTjXDVMmGbIu0cldC7eD4RNj7cxPDe3j/DOYgR06JwNrZFWqfH:ynvZGMuD3C7eDqNj7cxPAj/IrJwxDH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
37a1eb14df8235e36880b74868cf359a_JaffaCakes118

Files

37a1eb14df8235e36880b74868cf359a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b5642129475e8acce76c54efe1ac08b7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegCloseKey
RegEnumValueA
RegQueryInfoKeyA
CopySid
GetLengthSid
IsValidSid
LookupAccountNameA
GetUserNameA
StartServiceCtrlDispatcherA
ChangeServiceConfig2A
CloseServiceHandle
CreateServiceA
OpenSCManagerA
RegSetValueExA
RegCreateKeyA
DeleteService
QueryServiceStatus
ControlService
OpenServiceA
RegDeleteValueA
StartServiceA
RegisterServiceCtrlHandlerExA
SetServiceStatus
DeregisterEventSource
ReportEventA
RegisterEventSourceA
RegQueryValueExA
RegOpenKeyExA
RegDeleteKeyA
RegCreateKeyExA
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
RegSetValueExW
RegQueryValueExW
RegOpenKeyExW
RegCreateKeyExW

kernel32

GetCurrentThread
GetCurrentProcess
GetVersionExA
SetThreadPriority
SetPriorityClass
GetModuleFileNameA
Sleep
GetProcAddress
GetModuleHandleA
SetConsoleCtrlHandler
LocalFree
FormatMessageA
GlobalFree
GlobalAlloc
GetStdHandle
AllocConsole
GetThreadPriority
CallNamedPipeA
MultiByteToWideChar
ReleaseMutex
WaitForSingleObject
ResetEvent
WaitForMultipleObjects
SetEvent
CreateThread
CreateEventA
DisconnectNamedPipe
FlushFileBuffers
WriteFile
ReadFile
ConnectNamedPipe
CreateNamedPipeA
ExitThread
CreateMutexA
lstrlenW
WideCharToMultiByte
lstrlenA
LocalAlloc
LoadLibraryA
FreeLibrary
CreateFileA
CreateFileW
DeviceIoControl
SetLastError
GetPriorityClass
DebugBreak
CloseHandle
GetLastError
OutputDebugStringA
InterlockedDecrement

user32

DestroyWindow
PostMessageA
UnregisterDeviceNotification
RegisterDeviceNotificationA
RegisterClassA
CreateWindowExA
DefWindowProcA
wsprintfA

ole32

CoInitialize
CoCreateInstance
CoUninitialize

oleaut32

VariantInit
GetErrorInfo
SetErrorInfo
SysFreeString
VariantChangeType
CreateErrorInfo
SysStringLen
SysAllocStringByteLen
SysStringByteLen
SysAllocStringLen
SafeArrayUnaccessData
SysAllocString
SafeArrayCreate
SafeArrayAccessData
VariantClear

setupapi

SetupDiGetDeviceRegistryPropertyA
SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInfo
SetupDiGetClassDevsExA
CM_Reenumerate_DevNode
CM_Locate_DevNodeA
SetupDiGetDeviceInterfaceDetailW
SetupDiEnumDeviceInterfaces
SetupDiGetClassDevsA
SetupDiOpenDevRegKey

dsound

ord1

msvcrt

__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
_CxxThrowException
__getmainargs
__p___initenv
exit
_XcptFilter
_exit
_onexit
__dllonexit
?terminate@@YAXXZ
_except_handler3
??1type_info@@UAE@XZ
strlen
strcat
_controlfp
free
malloc
calloc
_mbscmp
isalnum
isspace
isalpha
sprintf
_mbsnbcpy
_ftol
_CIasin
strtod
_CIpow
_CIacos
_mbslwr
_mbsicmp
??3@YAXPAX@Z
__CxxFrameHandler
_purecall
??2@YAPAXI@Z
printf
_mbslen
_fdopen
_open_osfhandle
setvbuf
_iob
swprintf
wcsncmp
wcslen
wcscpy
sscanf
_mbsnbcmp
_mbsnbicmp
_strdup
memset
_wcsicmp
wcscat
strcpy

winmm

mixerMessage
mixerGetNumDevs

Sections

.text
Size: 104KB - Virtual size: 100KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 96KB - Virtual size: 93KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.vrdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

b5642129475e8acce76c54efe1ac08b7

Headers

File Characteristics

Imports

advapi32

kernel32

user32

ole32

oleaut32

setupapi

dsound

msvcrt

winmm

Sections

.text Size: 104KB - Virtual size: 100KB

.rdata Size: 20KB - Virtual size: 17KB

.data Size: 24KB - Virtual size: 21KB

.rsrc Size: 96KB - Virtual size: 93KB

.vrdata Size: 20KB - Virtual size: 20KB

.text
Size: 104KB - Virtual size: 100KB

.rdata
Size: 20KB - Virtual size: 17KB

.data
Size: 24KB - Virtual size: 21KB

.rsrc
Size: 96KB - Virtual size: 93KB

.vrdata
Size: 20KB - Virtual size: 20KB