85956bb97155b7dac054a164876d395e_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

85956bb97155b7dac054a164876d395e_JaffaCakes118
Size

22KB
MD5

85956bb97155b7dac054a164876d395e
SHA1

4ecf96a15e79a9b4e0a4a4dba31de9d4d3ca42e9
SHA256

7dc7273fbca8d19e00da5de166e85482462b716abfaf54a31a8232731853dc78
SHA512

803ca44792f96b8ad9e25412715714c641984eafbf0ac7c7850b85a3648e8b36b525cfe4c4420a5c309300eb67183b1c784bf4abef42e4faa9f67e6753207579
SSDEEP

384:fjPAr13c6bdYbyp71/l8k9ZXKSdNmSOJqKomoi5+ag2TIUm9ZCmrd:fspc/S7IkjXjMJ6mZE27m9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
85956bb97155b7dac054a164876d395e_JaffaCakes118

Files

85956bb97155b7dac054a164876d395e_JaffaCakes118
.exe windows:5 windows x86 arch:x86

3180d703f33bbfca57db8e7c539ff993

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ntdll

_snwprintf
RtlInitUnicodeString
_chkstk

advapi32

ConvertSidToStringSidW
GetTokenInformation
OpenProcessToken

kernel32

lstrcpyA
LocalAlloc
VirtualQuery
GetCurrentProcess
Sleep
GetProcAddress
LoadLibraryA
GetModuleHandleA
VirtualProtect
ExitProcess
GetComputerNameA
GetTempFileNameW
CreateFileA
GetFileSize
SetPriorityClass
SetFilePointer
lstrlenA
FreeLibrary
WaitForSingleObject
GetTickCount
VirtualFree
GetProcessHeap
WriteFile
GetCommandLineA
GetVolumeInformationA
TerminateProcess
ReadFile
lstrcatA
ExitThread
MultiByteToWideChar
SetThreadPriority
GetTempPathW
GetShortPathNameA
SetCurrentDirectoryA
FindFirstFileA
GetLastError
SetLastError
lstrcmpiA
VirtualAlloc
CopyFileA
FindClose
OpenMutexA
DeleteFileA
GetSystemInfo
GetModuleFileNameA
FindNextFileA
lstrcmpiW
LoadLibraryExA
CreateMutexA
GetVersionExA
WinExec
CloseHandle
LocalFree

wininet

DeleteUrlCacheEntryW

user32

EndPaint
GetMessageA
LoadCursorA
FindWindowA
UpdateWindow
SetWindowTextA
GetSystemMetrics
DispatchMessageA
ShowWindow
DefWindowProcA
CreateWindowExA
MessageBoxA
TranslateMessage
wsprintfW
BeginPaint
RegisterWindowMessageA
SendMessageA
SetFocus
wsprintfA
CharUpperA
LoadIconA
GetTopWindow
GetClassInfoExA
PostQuitMessage
RegisterClassExA
CreateDialogParamA

shell32

SHGetFolderPathA

ole32

OleInitialize

Sections

.text
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3180d703f33bbfca57db8e7c539ff993

Headers

DLL Characteristics

File Characteristics

Imports

ntdll

advapi32

kernel32

wininet

user32

shell32

ole32

Sections

.text Size: 18KB - Virtual size: 18KB

.data Size: 2KB - Virtual size: 22KB

.rsrc Size: 512B - Virtual size: 16B

.text
Size: 18KB - Virtual size: 18KB

.data
Size: 2KB - Virtual size: 22KB

.rsrc
Size: 512B - Virtual size: 16B