82067de4de855fa5d612c7504386ee45_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

82067de4de855fa5d612c7504386ee45_JaffaCakes118
Size

51KB
MD5

82067de4de855fa5d612c7504386ee45
SHA1

28c764bb60ae94d5dc5ce573c768733bb40cceae
SHA256

dcd31136d21d81177df4c5bbd4c2a43e075a8a5276fdc6262398f4bd3e348faf
SHA512

f258ed7509a2ea2a4ac22765bee8cb73387d94cf1e1cc2d712aee9bbb3b83e2d0e462cb85ce95e65717cac944e654acbc133efb025b04ae8ddcb3cb2dc05c14e
SSDEEP

768:g8mwyGlQs8fdTg3YFxc2QlbEqxOOSIdL2/8kgeLDHQJ0bjtwkbYNspqTK:gVGlQ7fJG3bfxF7R20kgwQ0fNG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
82067de4de855fa5d612c7504386ee45_JaffaCakes118

Files

82067de4de855fa5d612c7504386ee45_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2545a87eddb200374999d881a5d6cbbe

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

ChangeServiceConfigA
ControlService
CreateServiceA
GetTokenInformation
LookupAccountSidA
RegDeleteValueA
RegQueryValueExA

kernel32

CreateEventA
CreateFileA
CreateMutexA
CreateThread
DeviceIoControl
DisableThreadLibraryCalls
EnterCriticalSection
EnumSystemLocalesA
ExitProcess
FileTimeToLocalFileTime
FindFirstFileA
FreeLibrary
GetConsoleCP
GetConsoleMode
GetConsoleOutputCP
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetEnvironmentVariableA
GetFileSize
GetFileType
GetLastError
GetLocalTime
GetLocaleInfoA
GetModuleFileNameA
GetModuleHandleA
GetPrivateProfileSectionA
GetProcAddress
GetProcessHeap
GetStdHandle
GetSystemInfo
GetSystemTimeAsFileTime
GetUserDefaultLCID
GetVersion
GetVersionExA
GlobalHandle
GlobalLock
GlobalReAlloc
HeapAlloc
HeapFree
InterlockedIncrement
IsBadReadPtr
IsBadWritePtr
LeaveCriticalSection
LoadLibraryA
LoadResource
LocalAlloc
LocalFree
Module32First
Module32Next
MulDiv
MultiByteToWideChar
OpenProcess
QueryPerformanceCounter
ReadFile
ReadProcessMemory
ReleaseMutex
RemoveDirectoryA
SetCurrentDirectoryA
SetEnvironmentVariableA
SetErrorMode
SetEvent
SetHandleCount
SetLastError
SetPriorityClass
Sleep
TerminateProcess
TlsSetValue
UnhandledExceptionFilter
VirtualAlloc
WaitForSingleObject
lstrcmpA
lstrcmpiA
lstrcpyA
lstrcpynA
lstrlenA

user32

CallNextHookEx
CheckMenuItem
DialogBoxParamA
DrawTextA
EqualRect
ExitWindowsEx
FindWindowA
GetAsyncKeyState
GetClientRect
GetDlgItemTextA
GetParent
GetWindowRect
InflateRect
IsChild
IsWindow
LoadBitmapA
MessageBoxA
PostMessageA
RegisterClassExA
RegisterWindowMessageA
ScreenToClient
SetForegroundWindow
SetWindowLongA
SystemParametersInfoA
TranslateMessage
WinHelpA
wsprintfA

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA

Sections

.text
Size: 18KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.INIT
Size: 12KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2545a87eddb200374999d881a5d6cbbe

Headers

File Characteristics

Imports

advapi32

kernel32

user32

version

Sections

.text Size: 18KB - Virtual size: 20KB

.INIT Size: 12KB - Virtual size: 24KB

.data Size: 512B - Virtual size: 4KB

.rdata Size: 512B - Virtual size: 4KB

.idata Size: 3KB - Virtual size: 4KB

.edata Size: 15KB - Virtual size: 16KB

.rsrc Size: 1024B - Virtual size: 4KB

.text
Size: 18KB - Virtual size: 20KB

.INIT
Size: 12KB - Virtual size: 24KB

.data
Size: 512B - Virtual size: 4KB

.rdata
Size: 512B - Virtual size: 4KB

.idata
Size: 3KB - Virtual size: 4KB

.edata
Size: 15KB - Virtual size: 16KB

.rsrc
Size: 1024B - Virtual size: 4KB