70341e1024bcd9a246c4e0ac02cfc5be_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

70341e1024bcd9a246c4e0ac02cfc5be_JaffaCakes118
Size

495KB
MD5

70341e1024bcd9a246c4e0ac02cfc5be
SHA1

5772f494f2e61034320b693bc483fe36e7e4f959
SHA256

2e85af7c3fd7824c4fc2f97f3ad98b3191a48292b674a2e2e8800c0a96e9047d
SHA512

d379710d05e0ea039b1dc9f9d8d530f0b039b5c766fe64948f0361957ec9a9e2145b7f7ef54945cdec6efbe39ef7382d733c307403c2c03d880e2a1665256d38
SSDEEP

12288:UkwmX541VylxGBy0sd2MMnMMMMM1XZ7pQvTJqX9N9jLLsDeYwcGjx21YU:UkI1V+wfsQMMnMMMMM1u+9ICYwc0EY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
70341e1024bcd9a246c4e0ac02cfc5be_JaffaCakes118

Files

70341e1024bcd9a246c4e0ac02cfc5be_JaffaCakes118
.exe windows:4 windows x86 arch:x86

14239deb69a078a0ca88fb1a35aace56

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CallMsgFilterW

kernel32

TlsSetValue
InterlockedIncrement
FileTimeToSystemTime
HeapFree
HeapReAlloc
TerminateProcess
ResetEvent
SetFilePointer
GetTempPathA
VirtualQuery
ReleaseSemaphore
lstrlenA
GetLocaleInfoA
GetSystemDefaultLangID
FindNextFileA
CreateMailslotA
MoveFileA
HeapCreate
GetLastError
LockResource
WideCharToMultiByte
GetProcAddress
EnterCriticalSection
LoadLibraryExA
CompareStringW
ExitThread
CreateProcessW
GetShortPathNameA
FlushFileBuffers
GlobalSize
GetCPInfo
DeleteCriticalSection
GetDateFormatA
CreateProcessA
HeapSize
FreeResource
lstrcmpA
FindClose
SizeofResource
IsDBCSLeadByte
GetSystemInfo
SearchPathA
GlobalAlloc
UnlockFile
GlobalDeleteAtom
SetFileAttributesA
LoadLibraryA
GetFullPathNameA
ReadFile
WaitForSingleObject
GetStartupInfoA
VirtualAlloc
lstrcatA
lstrcpyA
FreeLibrary
CreateThread
SetEndOfFile
SystemTimeToFileTime
FormatMessageW
_llseek
CompareStringA
SetFileTime
GetVersionExA
GetModuleHandleA
GlobalLock
SetErrorMode
_lclose
FreeEnvironmentStringsW
DuplicateHandle
FindFirstFileA
TlsGetValue
GetFileType
DeleteFileA
GetModuleFileNameA
TlsAlloc
LockFile
GlobalHandle
_lwrite
SetEvent
GetVolumeInformationA
LeaveCriticalSection
CreateSemaphoreA
VirtualProtect
GetTickCount
GetCurrentProcessId
Sleep
WinExec
FormatMessageA
GetStringTypeExA
UnhandledExceptionFilter
GetCommandLineA
GetProfileStringA
GetLocalTime
SetLastError
GetUserDefaultLangID
GlobalAddAtomA
VirtualFree
HeapDestroy
InitializeCriticalSection
RtlUnwind
LoadResource
GetExitCodeProcess
GetModuleFileNameW
_lread
FindResourceA
MulDiv
GetStringTypeW

ddraw

DirectDrawEnumerateA

mswsock

sethostname

samlib

SamiEncryptPasswords
SamConnectWithCreds
SamRemoveMultipleMembersFromAlias
SamTestPrivateFunctionsUser

advapi32

RegDeleteValueA

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 153KB - Virtual size: 1.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 72B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 130KB - Virtual size: 130KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 205KB - Virtual size: 204KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

14239deb69a078a0ca88fb1a35aace56

Headers

DLL Characteristics

File Characteristics

Imports

user32

kernel32

ddraw

mswsock

samlib

advapi32

Sections

.text Size: 1KB - Virtual size: 1KB

.idata Size: 3KB - Virtual size: 3KB

.data Size: 153KB - Virtual size: 1.0MB

.reloc Size: 512B - Virtual size: 72B

.rsrc Size: 130KB - Virtual size: 130KB

.rdata Size: 205KB - Virtual size: 204KB

.text
Size: 1KB - Virtual size: 1KB

.idata
Size: 3KB - Virtual size: 3KB

.data
Size: 153KB - Virtual size: 1.0MB

.reloc
Size: 512B - Virtual size: 72B

.rsrc
Size: 130KB - Virtual size: 130KB

.rdata
Size: 205KB - Virtual size: 204KB