74ec27186981130b72121dae83b057dd_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

74ec27186981130b72121dae83b057dd_JaffaCakes118
Size

77KB
MD5

74ec27186981130b72121dae83b057dd
SHA1

5ed0ba7a5fb076741700ca54871f0a6bd5149241
SHA256

c2901eefb6d3a8295f28df9e4947c054cc0d3f56c9b0309ed2c965ed5d98de8c
SHA512

62ab153fbd4e4d4139802731f3d56150a44037fa31e2d71ef5a60856e8dee071f1f29d669f7a9c0d8f3a4407794151ffa3aee2635a33e8a00f05a3148b187917
SSDEEP

1536:UqSPME4LPcEQhSKaX1gSKQQmze4kQ3wSHJV4ikGVyw:6PME4Lk/hSXxV5kQgoJV4wVyw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
74ec27186981130b72121dae83b057dd_JaffaCakes118

Files

74ec27186981130b72121dae83b057dd_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bdc82c9d7bf4b45c0600f380d6afa189

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetDateFormatW
GetModuleHandleW
GetVersionExW
OpenProcess
GetSystemTime
GetVolumeInformationW
QueryPerformanceCounter
ReleaseMutex
CreateMutexW
FindResourceW
GetProcessHeap
GetLocalTime
GetStartupInfoW
lstrcmpW
WriteConsoleW
TlsAlloc
FindFirstFileW
FindNextFileW
FindClose
OpenMutexW
DeleteFileW
FindFirstChangeNotificationW
ResetEvent
GetEnvironmentVariableW
GetExitCodeProcess
GetCurrentThread
PeekNamedPipe
DuplicateHandle
CreateFileW

user32

CheckRadioButton
SendDlgItemMessageW
IsClipboardFormatAvailable
DestroyWindow
SetClipboardData
GetIconInfo
SetWindowTextW
IsDialogMessageW
SetForegroundWindow
SendMessageW
CheckDlgButton
LoadBitmapW

gdi32

SetAbortProc
AbortDoc
SetRectRgn
CombineRgn
EndDoc
GetTextMetricsW
SetBkMode
MoveToEx
LineTo
ExcludeClipRect

winspool.drv

DocumentPropertiesW
OpenPrinterW
ClosePrinter

advapi32

DeleteService
ControlService
CreateServiceW
GetTokenInformation
LookupPrivilegeValueW
AdjustTokenPrivileges
SetServiceStatus
SetSecurityDescriptorDacl
SetEntriesInAclW
RegisterServiceCtrlHandlerW
RegSetValueExW
RegEnumKeyW
InitializeSecurityDescriptor
StartServiceCtrlDispatcherW
OpenProcessToken
FreeSid
AllocateAndInitializeSid
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
CloseServiceHandle

ole32

CLSIDFromString
CoInitialize
OleInitialize
OleSetContainedObject
CoCreateInstance

ws2_32

getprotobynumber
setsockopt
socket
WSAConnect
WSACreateEvent
WSASocketW
getservbyname

version

GetFileVersionInfoW

msvcrt

_wcsicmp
_wcmdln
_XcptFilter
_exit
exit
strlen
atol
memmove
time
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_ltoa
_onexit
__dllonexit
_controlfp
__wgetmainargs

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 48KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 60KB - Virtual size: 493KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

bdc82c9d7bf4b45c0600f380d6afa189

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

winspool.drv

advapi32

ole32

ws2_32

version

msvcrt

Sections

.text Size: 16KB - Virtual size: 15KB

.rdata Size: 48KB - Virtual size: 46KB

.data Size: 60KB - Virtual size: 493KB

.reloc Size: 4KB - Virtual size: 4KB

.text
Size: 16KB - Virtual size: 15KB

.rdata
Size: 48KB - Virtual size: 46KB

.data
Size: 60KB - Virtual size: 493KB

.reloc
Size: 4KB - Virtual size: 4KB