7032eb19e4f5d3c8ebf1ebea811e5088_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

7032eb19e4f5d3c8ebf1ebea811e5088_JaffaCakes118
Size

76KB
MD5

7032eb19e4f5d3c8ebf1ebea811e5088
SHA1

195b1d79e0405b64b75aed0915a34f691356a0a3
SHA256

2fb33d9a8d5d66cc4af7a02fab8c259db0e9ed4c3e44b1f38ab9a0b7e88fb334
SHA512

eb0ac65676e214b6be6ec6addcbfe96cafd045078233fcc1e9e7b5592249a77421cfd01cd7ce47ecf740e67828ba2c5297461db78363667048cf6d06aafa25d7
SSDEEP

768:rX6bK4h4ld2lNLxPuSD4BRwDdzu1A6iVkS5D7RmFppEdeFbuV/lA5/E7r0HNkMqB:aK4hnPv0BR31Ar5anNI/lYEaNELb5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7032eb19e4f5d3c8ebf1ebea811e5088_JaffaCakes118

Files

7032eb19e4f5d3c8ebf1ebea811e5088_JaffaCakes118
.exe windows:4 windows x86 arch:x86

fbb6750fb8ae781418ba1e81cae62a15

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

DestroyPrivateObjectSecurity
CreatePrivateObjectSecurity
OpenProcessToken
ConvertStringSidToSidW
SetSecurityDescriptorDacl
AddAccessAllowedAce
AddAccessDeniedAce
InitializeAcl
GetLengthSid
GetTokenInformation
OpenThreadToken
InitializeSecurityDescriptor
AccessCheck
RevertToSelf
ImpersonateNamedPipeClient
ConvertStringSecurityDescriptorToSecurityDescriptorW

kernel32

GetCurrentProcessId
GetCurrentThreadId
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
Sleep
ConnectNamedPipe
DisconnectNamedPipe
GetTickCount
CreateEventW
CreateNamedPipeW
CreateNamedPipeA
GetCurrentThread
WaitForMultipleObjects
GetCurrentProcess
GetLastError
LocalFree
InitializeCriticalSection
LoadLibraryA
GetProcAddress

userenv

RefreshPolicy
GetDefaultUserProfileDirectoryA
DllGetClassObject
FreeGPOListW
ForceSyncFgPolicy
LoadUserProfileA

icm32

CMGetNamedProfileInfo
CMTranslateRGB
CMCreateTransformExtW
CMTranslateRGBsExt

Sections

.icode
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.JvOL
Size: 2KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.MtnP
Size: 2KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 10KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.LT
Size: 1KB - Virtual size: 99KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ygOYQm
Size: 5KB - Virtual size: 472KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 6KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.uZF
Size: 4KB - Virtual size: 132KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.lYxTST
Size: 3KB - Virtual size: 815KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fbb6750fb8ae781418ba1e81cae62a15

Headers

File Characteristics

Imports

advapi32

kernel32

userenv

icm32

Sections

.icode Size: 3KB - Virtual size: 2KB

.text Size: 14KB - Virtual size: 13KB

.JvOL Size: 2KB - Virtual size: 36KB

.rdata Size: 2KB - Virtual size: 7KB

.MtnP Size: 2KB - Virtual size: 41KB

.edata Size: 10KB - Virtual size: 22KB

.LT Size: 1KB - Virtual size: 99KB

.data Size: 9KB - Virtual size: 49KB

.ygOYQm Size: 5KB - Virtual size: 472KB

.edata Size: 6KB - Virtual size: 35KB

.uZF Size: 4KB - Virtual size: 132KB

.lYxTST Size: 3KB - Virtual size: 815KB

.rsrc Size: 12KB - Virtual size: 12KB

.icode
Size: 3KB - Virtual size: 2KB

.text
Size: 14KB - Virtual size: 13KB

.JvOL
Size: 2KB - Virtual size: 36KB

.rdata
Size: 2KB - Virtual size: 7KB

.MtnP
Size: 2KB - Virtual size: 41KB

.edata
Size: 10KB - Virtual size: 22KB

.LT
Size: 1KB - Virtual size: 99KB

.data
Size: 9KB - Virtual size: 49KB

.ygOYQm
Size: 5KB - Virtual size: 472KB

.edata
Size: 6KB - Virtual size: 35KB

.uZF
Size: 4KB - Virtual size: 132KB

.lYxTST
Size: 3KB - Virtual size: 815KB

.rsrc
Size: 12KB - Virtual size: 12KB