78f16e1a514db4fa9f718cedb6685da0_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

78f16e1a514db4fa9f718cedb6685da0_JaffaCakes118
Size

3.7MB
MD5

78f16e1a514db4fa9f718cedb6685da0
SHA1

7ac1a735ae80cc15aae8871e47dd4431521fa70f
SHA256

2e78fa0d7bc986fb769564efbd8181914eab10b173a64a24af8444b1b942ac7e
SHA512

131e04452a6debb5d06d87cd2a08d276964f413825fe5871f0b2d76ef21af33dedd8505b2d9c05f3336a8e06c6d07d9c1eb80ce21d69e138b470920c08089a2b
SSDEEP

49152:d0rIX26LGv8cf8yjVvHBm/c6IhD8p2/ZI8mCMIwzYfdFOt7fJAT9dv9fMyl9TaDS:d1WLjVZZ8p0ZUswzgdcxApdvirS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
78f16e1a514db4fa9f718cedb6685da0_JaffaCakes118

Files

78f16e1a514db4fa9f718cedb6685da0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a07dd9a347cf63d5c8aca083953b8e99

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

SetSecurityDescriptorGroup
ChangeServiceConfigW
SetFileSecurityA
GetSecurityDescriptorLength
GetNamedSecurityInfoA
UnlockServiceDatabase
GetSecurityDescriptorDacl
CreateServiceA
AddAccessDeniedAce
SetEntriesInAclW

shell32

DragQueryPoint
DragAcceptFiles
SHFileOperationW
Shell_NotifyIconW

kernel32

LoadLibraryExA
GlobalFlags
WriteConsoleOutputW
GetAtomNameA
EnumCalendarInfoA
CompareStringW
SetConsoleActiveScreenBuffer
DuplicateHandle
PulseEvent
GetModuleHandleA
EnumResourceNamesW
DebugBreak
GlobalFindAtomW
GetDriveTypeA
VirtualQuery
EnumTimeFormatsW
FreeEnvironmentStringsA
EnumSystemCodePagesW
GlobalAddAtomW
GetOEMCP
UnhandledExceptionFilter
FindFirstFileA
GetStartupInfoA
GetThreadPriority
PurgeComm
ExitProcess
GetCurrentProcessId

ws2_32

inet_ntoa
bind
WSAHtonl
WSAIoctl
setsockopt
accept
WSACleanup
WSAWaitForMultipleEvents

user32

GetUserObjectSecurity
CreateDialogParamA
SendMessageCallbackW
CreateIconFromResource
OpenIcon
RemovePropA
GetMenuStringW
IsCharAlphaW
RemoveMenu
GetProcessDefaultLayout
SetTimer

ole32

CoCreateInstance
OleGetIconOfClass

gdi32

EnumFontFamiliesA
SelectPalette
GetGlyphOutlineA
GetStockObject
SetWindowOrgEx
GetObjectA

Sections

.text
Size: 2KB - Virtual size: 221KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3.4MB - Virtual size: 3.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a07dd9a347cf63d5c8aca083953b8e99

Headers

File Characteristics

Imports

advapi32

shell32

kernel32

ws2_32

user32

ole32

gdi32

Sections

.text Size: 2KB - Virtual size: 221KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 3.4MB - Virtual size: 3.4MB

.rsrc Size: 19KB - Virtual size: 18KB

.text
Size: 2KB - Virtual size: 221KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 3.4MB - Virtual size: 3.4MB

.rsrc
Size: 19KB - Virtual size: 18KB