81c2581d6c77c5126cb66052bb6873d3_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

81c2581d6c77c5126cb66052bb6873d3_JaffaCakes118
Size

91KB
MD5

81c2581d6c77c5126cb66052bb6873d3
SHA1

a3fa2eaa58159bff5cc7b547e2c3f4231df7b48b
SHA256

2f500721df7eaa50a2b29206f404cf95296f7c315c5e84f10b57bf60529e0953
SHA512

5135e46292ef6c4db6ff3a5586ee6c8e73c1fa435090bebb7990efd5ba529d15c00583ff10a65d59111552a0390a5c52ee7bced58e19165c89e460987ef38fbe
SSDEEP

1536:3JN5tM49Ik/HWKg1A67JfWtrIa0Uy4VtJ2hWokQn2gKtht5Jus:3JrSWps7JfMUa0Uy4VtJ2hWokvg2VJb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
81c2581d6c77c5126cb66052bb6873d3_JaffaCakes118

Files

81c2581d6c77c5126cb66052bb6873d3_JaffaCakes118
.exe windows:5 windows x86 arch:x86

3a100e97fd3a0e7087f41e3f79e7ad63

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegSetValueExA
RegCloseKey
RegOpenKeyA
RegQueryValueExA
RegEnumKeyExA
RegOpenKeyExA
RegQueryInfoKeyA
RegEnumValueA
RegCreateKeyExA
RegDeleteKeyA
RegDeleteValueA
RegSetKeySecurity
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
RegEnumKeyA
GetSidSubAuthority
GetSidSubAuthorityCount
GetSidIdentifierAuthority
IsValidSid
GetTokenInformation
OpenProcessToken

kernel32

CloseHandle
WriteFile
SetFilePointer
CreateFileA
lstrcatA
lstrcpynA
GetEnvironmentVariableA
lstrcpyA
GetFileAttributesA
MoveFileExA
FreeLibrary
GetProcAddress
LoadLibraryA
GetSystemDirectoryA
DeleteFileA
SetFileAttributesA
SystemTimeToFileTime
GetSystemTime
CopyFileA
ExpandEnvironmentStringsA
GetLastError
WaitForSingleObject
CreateProcessA
CreateDirectoryA
MoveFileA
lstrlenA
SetEnvironmentVariableA
GetWindowsDirectoryA
GetCurrentDirectoryA
GetCommandLineA
SetLastError
GetCurrentProcess
GetVersionExA
GetStartupInfoA
ExitProcess
GetModuleHandleA
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
HeapAlloc
Sleep
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
LCMapStringA
MultiByteToWideChar
LCMapStringW
HeapSize
GetACP
GetOEMCP
GetCPInfo
HeapReAlloc
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
RtlUnwind
SetStdHandle
ReadFile
FlushFileBuffers
CompareStringA
GetSystemDefaultLangID

gdi32

TextOutA

user32

ReleaseDC
GetDC
SystemParametersInfoA
LoadKeyboardLayoutA
wsprintfA

ole32

CoCreateInstance
CoUninitialize
CoInitialize

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

Sections

.text
Size: 54KB - Virtual size: 54KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 35KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

3a100e97fd3a0e7087f41e3f79e7ad63

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

kernel32

gdi32

user32

ole32

version

Sections

.text Size: 54KB - Virtual size: 54KB

.data Size: 35KB - Virtual size: 37KB

.text
Size: 54KB - Virtual size: 54KB

.data
Size: 35KB - Virtual size: 37KB