7863665e28f4796856151a0815b3dfa4_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

7863665e28f4796856151a0815b3dfa4_JaffaCakes118
Size

3.7MB
MD5

7863665e28f4796856151a0815b3dfa4
SHA1

77cf1f88cba92c82deb4039311cf8ff779256952
SHA256

928884252bf3f2e07c828e94553c4b1485b27c73329317bdedcf2df1c8f26e46
SHA512

756467ddacf182067cc1cc13f3a9aee4033efbd779239ad1e2bbb8fcee3f617c0a7b31b34fc3d9185bf4b5a7473eef4ff009cd9e922ef3288365a57aea9f4b0e
SSDEEP

49152:d0rIX26LGv8cf8yjVvHBm/c6IhD8p2/ZI8mCMIwzYfdFOt7fJAT9dv9fMyl9TyXo:d1WLjVZZ8p0ZUswzgdcxApdvixXTE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7863665e28f4796856151a0815b3dfa4_JaffaCakes118

Files

7863665e28f4796856151a0815b3dfa4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a07dd9a347cf63d5c8aca083953b8e99

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

SetSecurityDescriptorGroup
ChangeServiceConfigW
SetFileSecurityA
GetSecurityDescriptorLength
GetNamedSecurityInfoA
UnlockServiceDatabase
GetSecurityDescriptorDacl
CreateServiceA
AddAccessDeniedAce
SetEntriesInAclW

shell32

DragQueryPoint
DragAcceptFiles
SHFileOperationW
Shell_NotifyIconW

kernel32

LoadLibraryExA
GlobalFlags
WriteConsoleOutputW
GetAtomNameA
EnumCalendarInfoA
CompareStringW
SetConsoleActiveScreenBuffer
DuplicateHandle
PulseEvent
GetModuleHandleA
EnumResourceNamesW
DebugBreak
GlobalFindAtomW
GetDriveTypeA
VirtualQuery
EnumTimeFormatsW
FreeEnvironmentStringsA
EnumSystemCodePagesW
GlobalAddAtomW
GetOEMCP
UnhandledExceptionFilter
FindFirstFileA
GetStartupInfoA
GetThreadPriority
PurgeComm
ExitProcess
GetCurrentProcessId

ws2_32

inet_ntoa
bind
WSAHtonl
WSAIoctl
setsockopt
accept
WSACleanup
WSAWaitForMultipleEvents

user32

GetUserObjectSecurity
CreateDialogParamA
SendMessageCallbackW
CreateIconFromResource
OpenIcon
RemovePropA
GetMenuStringW
IsCharAlphaW
RemoveMenu
GetProcessDefaultLayout
SetTimer

ole32

CoCreateInstance
OleGetIconOfClass

gdi32

EnumFontFamiliesA
SelectPalette
GetGlyphOutlineA
GetStockObject
SetWindowOrgEx
GetObjectA

Sections

.text
Size: 2KB - Virtual size: 221KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3.4MB - Virtual size: 3.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a07dd9a347cf63d5c8aca083953b8e99

Headers

File Characteristics

Imports

advapi32

shell32

kernel32

ws2_32

user32

ole32

gdi32

Sections

.text Size: 2KB - Virtual size: 221KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 3.4MB - Virtual size: 3.4MB

.rsrc Size: 19KB - Virtual size: 18KB

.text
Size: 2KB - Virtual size: 221KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 3.4MB - Virtual size: 3.4MB

.rsrc
Size: 19KB - Virtual size: 18KB