4a6e21aad5015e09d227b101b6f809aa_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

4a6e21aad5015e09d227b101b6f809aa_JaffaCakes118
Size

308KB
MD5

4a6e21aad5015e09d227b101b6f809aa
SHA1

4013fcb9210af903c7858b90334224aa73152f9d
SHA256

7361c180dee4eab193324ba17baf9f099c9bbc0e9611b6660657530e0d1ddf93
SHA512

3eaa1ea9166a889c4277073af8595006204342dd0f82aed6e10a14483e78bc3f18081aa765e495c7d8ff1de459165b51c565386ef781423da3230b85009de482
SSDEEP

6144:DH5Bf/w6JjkGiDOIo3kcZA10FVD6MM2GnuOiDy5yr:DZBw6JebvQ80FVD6MMduOv5w

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4a6e21aad5015e09d227b101b6f809aa_JaffaCakes118

Files

4a6e21aad5015e09d227b101b6f809aa_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f7d90bff5746c220d98af8ee6ae43da1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

oleaut32

RegisterTypeLi

advapi32

GetSecurityDescriptorSacl
SetThreadToken
OpenProcessToken
InitializeSid
RegOpenKeyExA
RegCreateKeyExW
DuplicateTokenEx
ChangeServiceConfigW
GetSidLengthRequired
CryptAcquireContextA
AddAce
LookupAccountNameW
OpenServiceW
CreateProcessAsUserW

kernel32

GetStartupInfoA
VirtualAlloc
InterlockedCompareExchange
lstrlenW
OpenProcess
CreateNamedPipeA
GetExitCodeThread
SetThreadPriority
GetSystemDefaultLangID
GetVolumeInformationA
FindResourceW
SetProcessWorkingSetSize
GetLogicalDrives
GetDateFormatA
CreateProcessA
GetDiskFreeSpaceA
GetFileSize
VerifyVersionInfoW
GetDriveTypeW
GlobalDeleteAtom
SetCurrentDirectoryA
GetSystemTimeAsFileTime
GlobalGetAtomNameA
CreateFileA
FileTimeToSystemTime
SetFileTime
GetTempFileNameW
CloseHandle
GetComputerNameW
DeleteTimerQueueTimer
LCMapStringW
LoadLibraryExA
GetProcessTimes
GetCurrentProcessId
CreateThread
TerminateThread
_llseek
FindFirstFileW
CreateFileMappingA
AddAtomA
ReadFile
GetLocaleInfoW
LCMapStringA
DeleteCriticalSection
TlsGetValue
GetTempPathW
FindCloseChangeNotification
GetPrivateProfileStringW
CreateTimerQueueTimer
GetVersionExW
lstrcmpA
IsDebuggerPresent
GetCurrentProcess
GetFileType
FreeEnvironmentStringsA
HeapReAlloc
LockFile
SetEndOfFile
OpenFileMappingW
GetOverlappedResult
QueryDosDeviceW
_lopen
FindNextFileW
GetUserDefaultLangID
CopyFileW
HeapSize
HeapSetInformation
FormatMessageW
LoadLibraryA
OutputDebugStringW
SuspendThread
GetOEMCP
lstrcmpiA
LoadLibraryExW
LocalFree
GetVersion
CreateDirectoryW
GetFullPathNameW
SetLastError
VirtualQuery
WritePrivateProfileStringA
Beep
VirtualFree
SetEnvironmentVariableW
SetStdHandle
WinExec
SetThreadExecutionState
GetProcAddress
GetStartupInfoW
FindNextChangeNotification
GetTimeFormatA
WriteConsoleW
CompareStringW
CreateSemaphoreA
BackupRead
FreeEnvironmentStringsW
lstrcatA
lstrcpynA
GetCommandLineA
GetStringTypeW
GetStringTypeA
MultiByteToWideChar
HeapAlloc
GetACP
GetCPInfo
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
InterlockedIncrement
InterlockedDecrement
WriteFile
RtlUnwind
HeapFree
HeapCreate
HeapDestroy
GetVersionExA
GetEnvironmentVariableA
GetLastError
TlsAlloc
TlsSetValue
GetCurrentThreadId
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
GetModuleFileNameA
UnhandledExceptionFilter
TerminateProcess
ExitProcess
GetModuleHandleA

user32

IsChild
GetQueueStatus
DdeConnect
PostMessageW
SetMessageQueue
CreateMenu
EmptyClipboard
UnregisterDeviceNotification
GetDCEx
ScrollDC
SetCursor
SetActiveWindow
GetActiveWindow
AppendMenuA
OemToCharBuffA
CreateIconIndirect
KillTimer
IsIconic
GetWindowRect
DdeAccessData
PostQuitMessage
CreateDialogIndirectParamA
GetDlgItemInt
DefFrameProcA
InvertRect
GetMenuItemInfoW
DrawFrameControl
CreateDialogParamW
GetWindowModuleFileNameA
EnumThreadWindows
FindWindowExW
LoadBitmapW
GetFocus
GetWindowWord
ScrollWindowEx
DdeFreeDataHandle
OemToCharA
SetClassLongW
GetWindowTextLengthA
CloseClipboard
IsWindowEnabled
DdeFreeStringHandle
GetCursorPos
AppendMenuW
InsertMenuW
IsWindowVisible
GetWindow
SetMenuItemInfoA
InsertMenuItemA
GetForegroundWindow
CheckMenuItem
GetUserObjectInformationW
WaitForInputIdle
SetScrollRange
SetDlgItemInt
RegisterClassW
SetProcessDefaultLayout
MessageBoxIndirectW
LoadImageW
BeginPaint
GetInputState
SetScrollPos
SetWindowPos
BroadcastSystemMessageA
DrawFocusRect
GetSysColorBrush
SubtractRect
CreateDialogParamA
WinHelpW
IsCharAlphaNumericW
CopyAcceleratorTableW

Sections

.text
Size: 252KB - Virtual size: 251KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f7d90bff5746c220d98af8ee6ae43da1

Headers

File Characteristics

Imports

oleaut32

advapi32

kernel32

user32

Sections

.text Size: 252KB - Virtual size: 251KB

.rdata Size: 28KB - Virtual size: 25KB

.data Size: 16KB - Virtual size: 17KB

.rsrc Size: 8KB - Virtual size: 5KB

.text
Size: 252KB - Virtual size: 251KB

.rdata
Size: 28KB - Virtual size: 25KB

.data
Size: 16KB - Virtual size: 17KB

.rsrc
Size: 8KB - Virtual size: 5KB