4611e86d703cda321431dc1a9ad92fdd_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

4611e86d703cda321431dc1a9ad92fdd_JaffaCakes118
Size

169KB
MD5

4611e86d703cda321431dc1a9ad92fdd
SHA1

4a95ad505a8178c072b34a0fa0db9ddcf4cf6a48
SHA256

ef334a41ce2562bf51ac7ff7e40bd2ee2342762ea69bcaa3a6555a197eb43fb3
SHA512

1400c1f51f8f03bf8f642ee71d7bae310bc6ee01679b64a6b7691aa4fdf454a4b5b9f34d02f6e21eaa0a838d4d996218543487703cd34d9c526d5158a1d3aaed
SSDEEP

3072:HHjLrcTcUDCuWBvkc2aD7QBjZ/wJgLU5Nd+zRLiQvj1SA30MPRzpPaUmZDkM:nQTcU2XBvR1gBjqJgoUNiQvBSA37+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4611e86d703cda321431dc1a9ad92fdd_JaffaCakes118

Files

4611e86d703cda321431dc1a9ad92fdd_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f13958fff67cda0f76bd83f277f7bcf8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

ChangeServiceConfig2A
CloseServiceHandle
GetSecurityDescriptorControl
GetUserNameA
LockServiceDatabase
LookupPrivilegeValueA
QueryServiceStatus
RegEnumValueA
RegFlushKey
RegOpenKeyA
RegQueryInfoKeyA
RegQueryValueA

kernel32

AddAtomA
CreateDirectoryA
CreateEventA
CreateFileA
CreateMutexA
DeleteCriticalSection
DeviceIoControl
EnterCriticalSection
ExitProcess
FileTimeToLocalFileTime
FindClose
FindFirstFileA
FindNextFileA
FlushFileBuffers
FreeLibrary
GetCPInfo
GetComputerNameA
GetConsoleMode
GetConsoleOutputCP
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetDateFormatA
GetFileTime
GetLastError
GetModuleFileNameA
GetModuleHandleA
GetPrivateProfileStringA
GetPrivateProfileStructA
GetProcessHeap
GetStartupInfoA
GetStdHandle
GetStringTypeA
GetSystemInfo
GetSystemTime
GetSystemTimeAsFileTime
GetTickCount
GetTimeZoneInformation
GetVersionExA
GetWindowsDirectoryA
GlobalLock
HeapDestroy
HeapFree
HeapSize
InterlockedDecrement
InterlockedExchange
IsBadCodePtr
IsBadWritePtr
IsDebuggerPresent
IsValidLocale
LCMapStringA
LeaveCriticalSection
LoadLibraryA
LocalFree
MoveFileA
MoveFileExA
MultiByteToWideChar
OpenProcess
QueryPerformanceCounter
ReleaseMutex
RemoveDirectoryA
ResumeThread
SetFileAttributesA
SetFilePointer
SetHandleCount
SetLastError
SetStdHandle
SetUnhandledExceptionFilter
SizeofResource
Sleep
TerminateProcess
TlsAlloc
TlsFree
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
VirtualProtect
WideCharToMultiByte
lstrcatA
lstrcmpiA

ole32

CLSIDFromProgID
CoInitialize
CoMarshalInterThreadInterfaceInStream
PropVariantClear

user32

CreateWindowExA
DefWindowProcA
DestroyIcon
DialogBoxParamA
DrawFocusRect
FindWindowA
GetClassNameA
GetClientRect
GetDC
GetDlgCtrlID
GetMessageA
GetSubMenu
GetSysColor
GetWindowTextA
IsIconic
IsWindow
LoadCursorA
MessageBoxA
PeekMessageA
PostQuitMessage
RegisterClassA
RegisterClipboardFormatA
SetDlgItemTextA
SetRect
SetWindowLongA
SetWindowPos
SetWindowRgn
TranslateMessage
wsprintfA

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA

Sections

.text
Size: - Virtual size: 272KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 167KB - Virtual size: 168KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

f13958fff67cda0f76bd83f277f7bcf8

Headers

File Characteristics

Imports

advapi32

kernel32

ole32

user32

version

Sections

.text Size: - Virtual size: 272KB

.data Size: 167KB - Virtual size: 168KB

.rsrc Size: 1KB - Virtual size: 1KB

.text
Size: - Virtual size: 272KB

.data
Size: 167KB - Virtual size: 168KB

.rsrc
Size: 1KB - Virtual size: 1KB