6412a046a40e15ef47c524077142630e_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

6412a046a40e15ef47c524077142630e_JaffaCakes118
Size

250KB
MD5

6412a046a40e15ef47c524077142630e
SHA1

4b991ec5ded1c214ca1011a266ae94a2ffc23491
SHA256

bbf28b065976313c7c91ff5a8f293d9e5eeeafb1eeec648ad592a60cc628ebcf
SHA512

1f52d0dbce928787cee7759f2434f45e165bafeb74c233b50607442ef29541f5624deef4bef7098d213b90094c9939f2fd4100ea74aa5b84b39d1d362b4de81d
SSDEEP

6144:Ccjlsubtn6BV+/1PSSggDhBkLq2pjMoyYKRKESBv:niuZ6Bq1aMWqBTSV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6412a046a40e15ef47c524077142630e_JaffaCakes118

Files

6412a046a40e15ef47c524077142630e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5ac02522db7668811dd224a0577fb68a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

RemoveDirectoryW
CreateEventW
OpenEventW
CloseHandle
FreeLibrary
GetPriorityClass
lstrcpynW
ResetEvent
WaitForMultipleObjects
CreateDirectoryW
GetPrivateProfileStringW
WritePrivateProfileStringW
LocalFree
SetErrorMode
WideCharToMultiByte
OutputDebugStringW
GetModuleHandleW
CreateProcessW
OpenProcess
WaitForSingleObject
SetProcessWorkingSetSize
MulDiv
CreateFileW
DeleteFileW
SetFileAttributesW
WriteFile
LoadLibraryExW
DeviceIoControl
ExpandEnvironmentStringsA
IsDebuggerPresent
UnhandledExceptionFilter
GetSystemTimeAsFileTime
GetCurrentThreadId
SetUnhandledExceptionFilter
PulseEvent
GetLocalTime
GetProcAddress

user32

LoadStringW
KillTimer
PostMessageW
GetSubMenu
SetForegroundWindow
LoadMenuW
AppendMenuW
GetCursorPos
CreatePopupMenu
GetMenuItemCount
RemoveMenu
SetMenuDefaultItem
GetClientRect
RedrawWindow
SetWindowPos
IsWindowVisible
GetDlgCtrlID
GetWindowRect
GetParent
GetDC
ReleaseDC
TranslateAcceleratorW
EnableWindow
SetTimer
PostQuitMessage
RegisterWindowMessageW
LoadImageW
LoadIconW
SendMessageW
UpdateWindow
GetForegroundWindow

gdi32

CreatePatternBrush
DeleteObject
GetObjectW
GetPixel
CreateSolidBrush
CreateCompatibleDC
GetDeviceCaps
RealizePalette
BitBlt
GetDIBColorTable
CreateHalftonePalette
CreateFontIndirectW
GetTextExtentPoint32W
GetStockObject
CreatePalette

advapi32

RegOpenKeyExA
RegQueryValueExA
OpenSCManagerW
OpenServiceW
QueryServiceStatus
StartServiceW
CloseServiceHandle
SetEntriesInAclW
RegDeleteValueW
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
FreeSid
AllocateAndInitializeSid
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
GetUserNameW

shell32

Shell_NotifyIconW
ShellExecuteW

msoert2

PszAllocA

iaspolcy

DllGetClassObject
DllRegisterServer

Sections

.text
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.aeN
Size: 1024B - Virtual size: 1005B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.uJm
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.qQn
Size: 512B - Virtual size: 329B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.wkrcoE
Size: 1KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.SfH
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.oCs
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.iaQU
Size: 512B - Virtual size: 805B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 213KB - Virtual size: 255KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Xij
Size: 1KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.F
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.XSOpU
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5ac02522db7668811dd224a0577fb68a

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

msoert2

iaspolcy

Sections

.text Size: 17KB - Virtual size: 16KB

.aeN Size: 1024B - Virtual size: 1005B

.uJm Size: 1KB - Virtual size: 1KB

.rdata Size: 3KB - Virtual size: 2KB

.qQn Size: 512B - Virtual size: 329B

.wkrcoE Size: 1KB - Virtual size: 2KB

.SfH Size: 1KB - Virtual size: 1KB

.oCs Size: 1024B - Virtual size: 1KB

.iaQU Size: 512B - Virtual size: 805B

.data Size: 213KB - Virtual size: 255KB

.Xij Size: 1KB - Virtual size: 2KB

.F Size: 1024B - Virtual size: 1KB

.XSOpU Size: 2KB - Virtual size: 3KB

.rsrc Size: 3KB - Virtual size: 3KB

.text
Size: 17KB - Virtual size: 16KB

.aeN
Size: 1024B - Virtual size: 1005B

.uJm
Size: 1KB - Virtual size: 1KB

.rdata
Size: 3KB - Virtual size: 2KB

.qQn
Size: 512B - Virtual size: 329B

.wkrcoE
Size: 1KB - Virtual size: 2KB

.SfH
Size: 1KB - Virtual size: 1KB

.oCs
Size: 1024B - Virtual size: 1KB

.iaQU
Size: 512B - Virtual size: 805B

.data
Size: 213KB - Virtual size: 255KB

.Xij
Size: 1KB - Virtual size: 2KB

.F
Size: 1024B - Virtual size: 1KB

.XSOpU
Size: 2KB - Virtual size: 3KB

.rsrc
Size: 3KB - Virtual size: 3KB