73e489e7663dc427c42f2435282fc0ac_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

73e489e7663dc427c42f2435282fc0ac_JaffaCakes118
Size

51KB
MD5

73e489e7663dc427c42f2435282fc0ac
SHA1

6fcf6dfe46fa8a76473c072925cda71e70f986d3
SHA256

2b91e7d014fd644a2a105e09520d502f8f7869f5a63eca83e7980f35949e427f
SHA512

b14ad31a3ee8bf2fa2447ad4d1a523e8d19661e43236897d8cf9797c722f309d034399aaa96b13b8d8ddcc07f1c1d6f9a857700e32c4a51fe647f63b0aa60fba
SSDEEP

768:gmwWziGlQsWCXTABYT3cCQJ4O+ZJ1YjOku8kWejDxQJ0bjtwkbYNspqOK:gLGlQpCzsn22jOwkWWQ0f5j

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
73e489e7663dc427c42f2435282fc0ac_JaffaCakes118

Files

73e489e7663dc427c42f2435282fc0ac_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2545a87eddb200374999d881a5d6cbbe

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

ChangeServiceConfigA
ControlService
CreateServiceA
GetTokenInformation
LookupAccountSidA
RegDeleteValueA
RegQueryValueExA

kernel32

CreateEventA
CreateFileA
CreateMutexA
CreateThread
DeviceIoControl
DisableThreadLibraryCalls
EnterCriticalSection
EnumSystemLocalesA
ExitProcess
FileTimeToLocalFileTime
FindFirstFileA
FreeLibrary
GetConsoleCP
GetConsoleMode
GetConsoleOutputCP
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetEnvironmentVariableA
GetFileSize
GetFileType
GetLastError
GetLocalTime
GetLocaleInfoA
GetModuleFileNameA
GetModuleHandleA
GetPrivateProfileSectionA
GetProcAddress
GetProcessHeap
GetStdHandle
GetSystemInfo
GetSystemTimeAsFileTime
GetUserDefaultLCID
GetVersion
GetVersionExA
GlobalHandle
GlobalLock
GlobalReAlloc
HeapAlloc
HeapFree
InterlockedIncrement
IsBadReadPtr
IsBadWritePtr
LeaveCriticalSection
LoadLibraryA
LoadResource
LocalAlloc
LocalFree
Module32First
Module32Next
MulDiv
MultiByteToWideChar
OpenProcess
QueryPerformanceCounter
ReadFile
ReadProcessMemory
ReleaseMutex
RemoveDirectoryA
SetCurrentDirectoryA
SetEnvironmentVariableA
SetErrorMode
SetEvent
SetHandleCount
SetLastError
SetPriorityClass
Sleep
TerminateProcess
TlsSetValue
UnhandledExceptionFilter
VirtualAlloc
WaitForSingleObject
lstrcmpA
lstrcmpiA
lstrcpyA
lstrcpynA
lstrlenA

user32

CallNextHookEx
CheckMenuItem
DialogBoxParamA
DrawTextA
EqualRect
ExitWindowsEx
FindWindowA
GetAsyncKeyState
GetClientRect
GetDlgItemTextA
GetParent
GetWindowRect
InflateRect
IsChild
IsWindow
LoadBitmapA
MessageBoxA
PostMessageA
RegisterClassExA
RegisterWindowMessageA
ScreenToClient
SetForegroundWindow
SetWindowLongA
SystemParametersInfoA
TranslateMessage
WinHelpA
wsprintfA

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA

Sections

.text
Size: 18KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.INIT
Size: 12KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2545a87eddb200374999d881a5d6cbbe

Headers

File Characteristics

Imports

advapi32

kernel32

user32

version

Sections

.text Size: 18KB - Virtual size: 20KB

.INIT Size: 12KB - Virtual size: 24KB

.data Size: 512B - Virtual size: 4KB

.rdata Size: 512B - Virtual size: 4KB

.idata Size: 3KB - Virtual size: 4KB

.edata Size: 15KB - Virtual size: 16KB

.rsrc Size: 1024B - Virtual size: 4KB

.text
Size: 18KB - Virtual size: 20KB

.INIT
Size: 12KB - Virtual size: 24KB

.data
Size: 512B - Virtual size: 4KB

.rdata
Size: 512B - Virtual size: 4KB

.idata
Size: 3KB - Virtual size: 4KB

.edata
Size: 15KB - Virtual size: 16KB

.rsrc
Size: 1024B - Virtual size: 4KB