3cc1753b9cd63fe57522078f784e88b3_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

3cc1753b9cd63fe57522078f784e88b3_JaffaCakes118
Size

68KB
MD5

3cc1753b9cd63fe57522078f784e88b3
SHA1

f80a268f92d340c18b6b228eee0de89a82e92a5b
SHA256

54bd323043a207c3b431d06236dc9951344344a88115ca3b61c14926a299954a
SHA512

df3b7526ed7df4855dfbb876b70ff9d2a28a110e50c648d6f6777f9572fa865501d65e8fc17514a7447d972868eb0917e442ef2b5420783a62b72843903abce6
SSDEEP

1536:oySwfhXDMZnW1IESc7rFjHwFJNSpwzc6dRHNh+j:oyfDinW1IEdB6NS6zXRth

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3cc1753b9cd63fe57522078f784e88b3_JaffaCakes118

Files

3cc1753b9cd63fe57522078f784e88b3_JaffaCakes118
.exe windows:5 windows x86 arch:x86

5b0ed0d14512bc6acc437bfaf2b10948

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

e:\work_svn\madonna\build\Release\bin\i386\Execode_GL.pdb

Imports

advapi32

AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken
RegCloseKey
RegDeleteKeyA
RegQueryValueExA
RegOpenKeyA
RegEnumKeyA
RegSetValueExA
RegCreateKeyA
RevertToSelf
SetThreadToken
DuplicateTokenEx
ImpersonateSelf
FreeSid
CheckTokenMembership
AllocateAndInitializeSid
RegFlushKey
RegCreateKeyExA
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
RegOpenKeyExA
RegEnumValueA
RegDeleteValueA
CryptDestroyHash
RegQueryValueExW
RegLoadKeyA
RegUnLoadKeyA
CryptHashData
CryptCreateHash
CryptReleaseContext
CryptAcquireContextA
CryptGetHashParam

kernel32

ExpandEnvironmentStringsA
GetSystemDirectoryA
Sleep
CreateThread
GetSystemTime
ExitThread
GetCurrentThreadId
GetTickCount
TerminateThread
lstrcmpiA
GetLastError
DeviceIoControl
Process32Next
Process32First
CreateToolhelp32Snapshot
OpenProcess
GetDiskFreeSpaceExA
GetDriveTypeA
GetLogicalDrives
GetExitCodeThread
WaitForSingleObject
GetModuleFileNameA
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
CreateMutexA
EnterCriticalSection
CreateProcessA
SetFilePointer
SetFileAttributesA
CreateDirectoryA
CreateEventA
InitializeCriticalSection
ResetEvent
SetEvent
FreeLibrary
GetProcAddress
LoadLibraryA
GetDateFormatA
GetTimeFormatA
lstrlenA
OutputDebugStringA
ReleaseMutex
WriteConsoleA
GetStdHandle
FlushFileBuffers
SetUnhandledExceptionFilter
lstrcpynW
LocalAlloc
LocalReAlloc
GetFileAttributesA
GetPrivateProfileSectionNamesW
GetPrivateProfileStringW
TerminateProcess
GetLocalTime
VirtualQuery
GetFileSize
ReadFile
CreateFileA
DeleteFileA
GetPrivateProfileIntW
LocalFree
GetPrivateProfileIntA
GetPrivateProfileStringA
FindFirstFileA
FindNextFileA
FindClose
lstrcmpW
lstrcpyW
lstrcmpiW
lstrcpynA
lstrcpyA
lstrcmpA
lstrlenW
lstrcatW
lstrcatA
WideCharToMultiByte
MultiByteToWideChar
GetVolumeInformationA
GetSystemTimeAsFileTime
HeapReAlloc
HeapFree
GetProcessHeap
WriteFile
GetCurrentProcess
CloseHandle
GetVersion
LeaveCriticalSection
HeapAlloc

ntdll

strcat
strcpy
isalpha
_fltused
strcspn
memset
strlen
_vsnprintf
strcmp
_chkstk
strstr
atoi
memcpy
wcsncpy
_snprintf
isgraph

wininet

InternetOpenUrlA
InternetCloseHandle
InternetReadFile
InternetOpenA
FtpPutFileA
InternetConnectA
FindCloseUrlCache
FindNextUrlCacheEntryA
FindFirstUrlCacheEntryA

ws2_32

ntohs
recvfrom
WSAGetLastError
bind
listen
accept
select
__WSAFDIsSet
WSAStartup
setsockopt
getsockname
ioctlsocket
sendto
send
socket
connect
closesocket
htons
inet_addr
gethostbyname
inet_ntoa
recv

user32

wsprintfA
wsprintfW

ole32

CoTaskMemFree

imagehlp

SymCleanup
StackWalk
SymInitialize
SymGetSymFromAddr
SymGetModuleBase
SymFunctionTableAccess

iphlpapi

GetAdaptersInfo

Sections

.text
Size: 65KB - Virtual size: 65KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 87KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

5b0ed0d14512bc6acc437bfaf2b10948

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

advapi32

kernel32

ntdll

wininet

ws2_32

user32

ole32

imagehlp

iphlpapi

Sections

.text Size: 65KB - Virtual size: 65KB

.data Size: 2KB - Virtual size: 87KB

.text
Size: 65KB - Virtual size: 65KB

.data
Size: 2KB - Virtual size: 87KB