5afd1a383f9ebd48a4d478d9d6e384c8_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

5afd1a383f9ebd48a4d478d9d6e384c8_JaffaCakes118
Size

504KB
MD5

5afd1a383f9ebd48a4d478d9d6e384c8
SHA1

7205d2b5bc9f23869e000f37df1a92e58bc9ff5c
SHA256

5e65adc8f6905325a840d69dac554525379987690898a68964f3173a76247960
SHA512

237e566ad98e81e2fec205d54253cf2199b9282e31bdf8dd93e952cf8462e35e046c52e7c5a60b645bcbdc0e711b3093ef472377775f72c975acf98d388b0fd6
SSDEEP

12288:+yHx0H+pgoJdDRUD0Y5uQwQTvm+xHVoi4u0oq:5HyepgoJ4bv9TMHRv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5afd1a383f9ebd48a4d478d9d6e384c8_JaffaCakes118

Files

5afd1a383f9ebd48a4d478d9d6e384c8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

450696b966d8727f7def654307d701ef

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EnumResourceNamesA
GetConsoleCursorInfo
WritePrivateProfileSectionW
UnmapViewOfFile
LeaveCriticalSection
GetFileType
CompareStringW
GlobalReAlloc
GetCommandLineW
ConnectNamedPipe
GetProcessHeap
IsValidLocale
GetBinaryTypeA
EndUpdateResourceA
CancelIo
EnumSystemCodePagesW
LoadLibraryExA
GetSystemTime
GetModuleFileNameW
GetVolumeInformationW
ExitThread
SetCurrentDirectoryA
SuspendThread
WriteProcessMemory
WaitNamedPipeA
VirtualQuery
FreeLibrary
GetOverlappedResult
SetLastError
FlushFileBuffers
GlobalFree
_hread
ExitProcess

user32

UpdateWindow
DrawAnimatedRects
MessageBoxIndirectW
SendMessageTimeoutW
ChildWindowFromPoint
GetKeyboardLayoutNameW
DispatchMessageA
GetMonitorInfoW
SetWindowLongA
ReleaseDC
FindWindowW
GetClipboardFormatNameA

version

VerQueryValueA

advapi32

CryptAcquireContextA
RegisterServiceCtrlHandlerW
RegOpenKeyA
SetTokenInformation
GetSecurityDescriptorGroup
LookupAccountSidA
RegQueryInfoKeyW
CryptCreateHash
LogonUserW

ws2_32

WSAAsyncGetHostByName
recv
WSAConnect
getprotobyname

ole32

ReadClassStg
ReadClassStm

oleaut32

QueryPathOfRegTypeLi
SafeArrayRedim
LoadTypeLi
SafeArrayUnaccessData
SafeArrayPutElement

Sections

.text
Size: 2KB - Virtual size: 218KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 269KB - Virtual size: 269KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

450696b966d8727f7def654307d701ef

Headers

File Characteristics

Imports

kernel32

user32

version

advapi32

ws2_32

ole32

oleaut32

Sections

.text Size: 2KB - Virtual size: 218KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 269KB - Virtual size: 269KB

.rsrc Size: 16KB - Virtual size: 16KB

.text
Size: 2KB - Virtual size: 218KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 269KB - Virtual size: 269KB

.rsrc
Size: 16KB - Virtual size: 16KB