82f8f355ffc42dc8674d69c42fe4b563_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

82f8f355ffc42dc8674d69c42fe4b563_JaffaCakes118
Size

104KB
MD5

82f8f355ffc42dc8674d69c42fe4b563
SHA1

7be9cf3587306a520d1b786a9a7f0deec8566efe
SHA256

bb60d5cfb630568fe39fa3a092554f04e58dd0a4b2b737757cb4fb21ef5fd6db
SHA512

b98a3c49a1b3914f89c57d08ce96556b3f67b53b2b327a485907b106c3cc9aa3ad8eea9b378be6ece0c54cdca996897d80973f82f033b3f1e6223e655a86a635
SSDEEP

1536:MMplmwDaTZxCrgbkKr5qqaigc7EV0zg9VK9pxCdyn+7M+83vs8FYVh86OhVuO2b1:9pll7m1rOigrfwYi+g+EryP86Oj2baa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
82f8f355ffc42dc8674d69c42fe4b563_JaffaCakes118

Files

82f8f355ffc42dc8674d69c42fe4b563_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ee940f39ab66a6b7703d921f0c0f5dc5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetPropA
ReleaseDC
RegisterClassA
GetWindowLongA
GetPropA
GetDoubleClickTime
GetDlgItemTextA
GetDC
GetClientRect
GetCapture
FrameRect
ExitWindowsEx
EnumChildWindows
DrawEdge
CloseClipboard

netapi32

NetDfsManagerSendSiteInfo
NetLocalGroupSetInfo
NetReplExportDirEnum
NetShareDel
NetUserEnum

oleaut32

SysReAllocString
SysStringLen
SafeArrayDestroy
RevokeActiveObject
OleTranslateColor
OleLoadPicture
OleIconToCursor
GetErrorInfo

dbghelp

SymGetModuleBase
SymGetLineFromAddr64
SymEnumerateSymbolsW
FindDebugInfoFileEx

shlwapi

ColorHLSToRGB
PathAddExtensionA
PathFindFileNameW
PathIsUNCServerA
AssocQueryKeyA
ChrCmpIA

advapi32

CreateProcessAsUserW
ElfOpenEventLogA
LookupPrivilegeNameA
LsaClearAuditLog
RegUnLoadKeyW
SetFileSecurityA
SetPrivateObjectSecurity
SetSecurityDescriptorRMControl
SetServiceStatus
AddAuditAccessObjectAce

kernel32

WriteFileEx
SetUnhandledExceptionFilter
SetTapeParameters
SetEvent
HeapCreate
HeapAlloc
GetVolumeInformationA
GetVersionExW
GetVersionExA
GetStartupInfoA
GetModuleHandleA
GetCommandLineA
FoldStringA
FindVolumeMountPointClose
FindFirstVolumeW
CancelTimerQueueTimer
CloseHandle
EnumResourceNamesA
EnumSystemLanguageGroupsW
ExitProcess
AssignProcessToJobObject

Sections

.text
Size: 64KB - Virtual size: 63KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ee940f39ab66a6b7703d921f0c0f5dc5

Headers

File Characteristics

Imports

user32

netapi32

oleaut32

dbghelp

shlwapi

advapi32

kernel32

Sections

.text Size: 64KB - Virtual size: 63KB

.data Size: 28KB - Virtual size: 27KB

.rsrc Size: 4KB - Virtual size: 3KB

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 64KB - Virtual size: 63KB

.data
Size: 28KB - Virtual size: 27KB

.rsrc
Size: 4KB - Virtual size: 3KB

.reloc
Size: 4KB - Virtual size: 3KB