72186831dbd374bc53fd9f195f47317b_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

72186831dbd374bc53fd9f195f47317b_JaffaCakes118
Size

92KB
MD5

72186831dbd374bc53fd9f195f47317b
SHA1

b4ee7706d3e9bd57800a8d26d299e043bd3025d3
SHA256

d4b34c2142636b9355dd35d5706b50e6c9dedda30e17a46b1a661945a1a79234
SHA512

ff82d6165c8a6efc196d4d2f2669d44b896781f61608e8636c0b5b692113a9920ed4680790a9ae500fe202597f478eacba4a9ca46c2df323635d3d99a95f5d68
SSDEEP

1536:jJN5tM49Ik/HWKg1A67JfWtrIa0Uy4VtJqLRehgSJwepzesV:jJrSWps7JfMUa0Uy4VtJqLYhxaepS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
72186831dbd374bc53fd9f195f47317b_JaffaCakes118

Files

72186831dbd374bc53fd9f195f47317b_JaffaCakes118
.exe windows:5 windows x86 arch:x86

3a100e97fd3a0e7087f41e3f79e7ad63

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegSetValueExA
RegCloseKey
RegOpenKeyA
RegQueryValueExA
RegEnumKeyExA
RegOpenKeyExA
RegQueryInfoKeyA
RegEnumValueA
RegCreateKeyExA
RegDeleteKeyA
RegDeleteValueA
RegSetKeySecurity
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
RegEnumKeyA
GetSidSubAuthority
GetSidSubAuthorityCount
GetSidIdentifierAuthority
IsValidSid
GetTokenInformation
OpenProcessToken

kernel32

CloseHandle
WriteFile
SetFilePointer
CreateFileA
lstrcatA
lstrcpynA
GetEnvironmentVariableA
lstrcpyA
GetFileAttributesA
MoveFileExA
FreeLibrary
GetProcAddress
LoadLibraryA
GetSystemDirectoryA
DeleteFileA
SetFileAttributesA
SystemTimeToFileTime
GetSystemTime
CopyFileA
ExpandEnvironmentStringsA
GetLastError
WaitForSingleObject
CreateProcessA
CreateDirectoryA
MoveFileA
lstrlenA
SetEnvironmentVariableA
GetWindowsDirectoryA
GetCurrentDirectoryA
GetCommandLineA
SetLastError
GetCurrentProcess
GetVersionExA
GetStartupInfoA
ExitProcess
GetModuleHandleA
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
HeapAlloc
Sleep
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
LCMapStringA
MultiByteToWideChar
LCMapStringW
HeapSize
GetACP
GetOEMCP
GetCPInfo
HeapReAlloc
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
RtlUnwind
SetStdHandle
ReadFile
FlushFileBuffers
CompareStringA
GetSystemDefaultLangID

gdi32

TextOutA

user32

ReleaseDC
GetDC
SystemParametersInfoA
LoadKeyboardLayoutA
wsprintfA

ole32

CoCreateInstance
CoUninitialize
CoInitialize

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

Sections

.text
Size: 54KB - Virtual size: 54KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 36KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rywiftv
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

3a100e97fd3a0e7087f41e3f79e7ad63

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

kernel32

gdi32

user32

ole32

version

Sections

.text Size: 54KB - Virtual size: 54KB

.data Size: 36KB - Virtual size: 37KB

rywiftv Size: - Virtual size: 4KB

.text
Size: 54KB - Virtual size: 54KB

.data
Size: 36KB - Virtual size: 37KB

rywiftv
Size: - Virtual size: 4KB