658b690b017a8c0607088e72da8e270d_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

658b690b017a8c0607088e72da8e270d_JaffaCakes118
Size

89KB
MD5

658b690b017a8c0607088e72da8e270d
SHA1

eff6f03b6fb220c0ec36c3c620c2e36f8ee0ac4c
SHA256

59bc2b478e6387739a627e2b6129203fb40ea7464301dbb9d83f8731cba8a0d4
SHA512

794ce4453658bfbb3e1c63889db234bbcf3879e4ea1811a37f384e9c01422d4f203c072cfae71ad7c5fd8b9cf975e70f9fd8cd4722506221b3d6b16e5e677c1b
SSDEEP

1536:4HmFOcoVzKt757xVDZqCtX/cL0bAyjDDLk1XSnOvZ+1K/WZH9hpolRnrtd:w8OcwzSFtZw0XPDWXhhaK+h9hpoldZd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
658b690b017a8c0607088e72da8e270d_JaffaCakes118

Files

658b690b017a8c0607088e72da8e270d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

427e1433a432b75fd8ab691cf6244ba3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

AllocateAndInitializeSid
FreeSid
GetLengthSid
InitializeAcl
InitializeSecurityDescriptor
RegCloseKey
RegCreateKeyA
RegCreateKeyExA
RegDeleteValueA
RegOpenKeyA
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA
SetSecurityDescriptorDacl

winmm

waveInGetNumDevs
waveInGetDevCapsA
mixerOpen
mixerGetNumDevs
mixerGetID
mixerGetDevCapsA
mixerClose

setupapi

SetupDiCallClassInstaller
SetupDiEnumDeviceInfo
SetupDiGetClassDevsA
SetupDiGetDeviceInstanceIdA
SetupDiGetDeviceInterfaceDetailA
SetupDiSetClassInstallParamsA
SetupDiDestroyDeviceInfoList

user32

PostQuitMessage
PostMessageA
LoadStringA
LoadImageA
LoadIconA
LoadCursorA
InsertMenuItemA
GetWindow
GetSysColor
RegisterClassA
GetMenuCheckMarkDimensions
GetDesktopWindow
GetDC
GetCursorPos
GetClassNameA
DispatchMessageA
DestroyMenu
DefWindowProcA
CreateWindowExA
CreatePopupMenu
ReleaseDC
SendMessageA
SetForegroundWindow
ShowWindow
SystemParametersInfoA
TranslateMessage
GetMessageA
TrackPopupMenu

kernel32

lstrlenA
lstrcpyA
lstrcmpiA
lstrcmpA
WriteFile
WinExec
WideCharToMultiByte
WaitForSingleObject
WaitForMultipleObjects
VirtualFree
VirtualAlloc
UnhandledExceptionFilter
TerminateProcess
Sleep
SetHandleCount
SetEvent
SearchPathA
RtlUnwind
MultiByteToWideChar
LocalFree
LocalAlloc
LoadLibraryA
LCMapStringA
HeapReAlloc
HeapFree
HeapDestroy
HeapCreate
HeapAlloc
GetVersionExA
GetVersion
GetStringTypeW
GetStringTypeA
GetStdHandle
GetStartupInfoA
GetProcessHeap
GetProcAddress
GetOEMCP
GetModuleHandleA
GetModuleFileNameA
GetLastError
GetFileType
GetEnvironmentStringsA
GetCurrentProcess
GetCommandLineA
CloseHandle
CreateEventA
CreateMutexA
CreateProcessA
DeviceIoControl
ExitProcess
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetACP

Sections

.text
Size: 75KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

427e1433a432b75fd8ab691cf6244ba3

Headers

File Characteristics

Imports

advapi32

winmm

setupapi

user32

kernel32

Sections

.text Size: 75KB - Virtual size: 76KB

.data Size: 9KB - Virtual size: 12KB

.rsrc Size: 1KB - Virtual size: 4KB

.reloc Size: 2KB - Virtual size: 4KB

.text
Size: 75KB - Virtual size: 76KB

.data
Size: 9KB - Virtual size: 12KB

.rsrc
Size: 1KB - Virtual size: 4KB

.reloc
Size: 2KB - Virtual size: 4KB