5a3a5a122b68b042fb6e2f34b013048f_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

5a3a5a122b68b042fb6e2f34b013048f_JaffaCakes118
Size

447KB
MD5

5a3a5a122b68b042fb6e2f34b013048f
SHA1

1d00b07abb0e42c56b9d5fa55ef34c2f9a6824ac
SHA256

f43b9e36965ed9970580e4bee83a065522d918e2c5b91b2251d6620d85ed64ef
SHA512

408d5e276ec112f244720274572b285859809e23f0492ad494aac01c795c5897370a3d08797e13e43fcbc1504d727e6e3bf681d746812d4907dccaee8eece095
SSDEEP

6144:Ih9O3AoAt9h4qm2N0fI84xBUREzS5uGLjAE7me:ADoARE2N0fJgzmb7f

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5a3a5a122b68b042fb6e2f34b013048f_JaffaCakes118

Files

5a3a5a122b68b042fb6e2f34b013048f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f5ad629d682c0c4e61d2bc97c473b7de

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

EnumDateFormatsExW
EnumTimeFormatsA
EraseTape
ExitProcess
GetDateFormatW
GetFileAttributesExW
GetPrivateProfileStringW
GetTapeStatus
GetVersionExW
GlobalHandle
HeapCompact
IsProcessorFeaturePresent
LocalSize
MapViewOfFile
OpenMutexW
OpenWaitableTimerW
ReleaseMutex
SetEnvironmentVariableA
SetFileApisToOEM
Toolhelp32ReadProcessMemory
VirtualProtectEx
WriteFileEx
_hwrite
_lcreat

advapi32

BuildImpersonateTrusteeA
ChangeServiceConfigW
CreateProcessAsUserW
CryptGetHashParam
CryptSetProviderW
GetAclInformation
GetAuditedPermissionsFromAclW
GetTrusteeTypeA
IsValidAcl
IsValidSecurityDescriptor
LookupPrivilegeDisplayNameA
ObjectOpenAuditAlarmW
OpenSCManagerA
QueryServiceStatus
RegCreateKeyA
RegOpenKeyExW
RegSaveKeyA
RegSetKeySecurity
RegisterEventSourceW
SetEntriesInAccessListA
SetNamedSecurityInfoExW
SetPrivateObjectSecurity
SetTokenInformation
StartServiceW

gdi32

AngleArc
AnimatePalette
CreateBrushIndirect
CreateColorSpaceW
CreateFontW
CreateRectRgn
DeleteMetaFile
EnableEUDC
EndPath
ExcludeClipRect
ExtTextOutW
GdiSetBatchLimit
GetCharWidth32A
GetCharacterPlacementA
GetGlyphOutline
GetGraphicsMode
GetKerningPairs
GetObjectA
GetOutlineTextMetricsA
GetTextMetricsA
Polyline
PtVisible
RestoreDC
SelectObject
SetWorldTransform
UpdateICMRegKeyW

Sections

.text
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 226KB - Virtual size: 232KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 220KB - Virtual size: 240KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

f5ad629d682c0c4e61d2bc97c473b7de

Headers

File Characteristics

Imports

kernel32

advapi32

gdi32

Sections

.text Size: 512B - Virtual size: 4KB

.data Size: 226KB - Virtual size: 232KB

.idata Size: - Virtual size: 16KB

.rsrc Size: 220KB - Virtual size: 240KB

.text
Size: 512B - Virtual size: 4KB

.data
Size: 226KB - Virtual size: 232KB

.idata
Size: - Virtual size: 16KB

.rsrc
Size: 220KB - Virtual size: 240KB