86282337242629e73c4693b601c7fd60_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

86282337242629e73c4693b601c7fd60_JaffaCakes118
Size

150KB
MD5

86282337242629e73c4693b601c7fd60
SHA1

1d296f20f2121376622f37433aa15c5221d3d407
SHA256

9bbad35921675083c62d907c76a35a39cebfff12cc221dc186002a2ca21d639d
SHA512

ebdfd09d59cd11cdcac1b5a2f36ba63cf6b08f542ba87e5533204d84f84f42b8504fba62a516ac033e311575b3df932ae8fc71f4a04d9dba4dfdaf175e087103
SSDEEP

3072:nhFXUYwMfLarzbekew1db4kIzsTvbcu8gG/OAV8rDITrbPq3ZjXRNFVx:nhRwtekewZ4sHPDITrbi3ZjXRNFVx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
86282337242629e73c4693b601c7fd60_JaffaCakes118

Files

86282337242629e73c4693b601c7fd60_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bb067e381eb2a5b2a319e8bb85a19c4c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetFilePointer
lstrlenA
ReadFile
GetSystemTime
GetFileSize
GetCurrentProcessId
CreateThread
TerminateThread
GetDriveTypeA
GetLogicalDriveStringsA
FindClose
FindNextFileA
FindFirstFileA
HeapReAlloc
VirtualAlloc
VirtualFree
WriteFile
CreateFileA
lstrcatA
ExitThread
GetTickCount
lstrcmpiA
CreateMutexA
CloseHandle
ExitProcess
GetCurrentThread
SetThreadPriority
Sleep
GetCurrentProcess
RaiseException
GetLocalTime
lstrcpynA
GetSystemDirectoryA
CreateDirectoryA
lstrcmpA
GetComputerNameA
GetProcessTimes
CreateProcessA
GetVersionExA
GetTempFileNameA
GetTempPathA
WinExec
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
GetExitCodeThread
InitializeCriticalSection
SystemTimeToFileTime
FileTimeToSystemTime
FileTimeToLocalFileTime
CreateEventA
SetEvent
WaitForSingleObject
RtlUnwind
MultiByteToWideChar
LCMapStringW
LCMapStringA
WideCharToMultiByte
HeapAlloc
HeapFree
GetModuleHandleA
lstrcpyA
GetFileAttributesA
DeleteFileA
MoveFileA
LoadLibraryA
GetProcAddress
GlobalAlloc
GlobalFree
FreeLibrary
GetLastError
GetModuleFileNameA

user32

CharLowerA
wvsprintfA
wsprintfA

advapi32

InitializeAcl
RegOpenKeyExA
GetUserNameA
RegQueryValueExA
CloseEventLog
ReadEventLogA
OpenEventLogA
RegDeleteKeyA
RegSetValueExA
IsValidAcl
ControlService
ChangeServiceConfigA
OpenSCManagerA
OpenServiceA
DeleteService
CloseServiceHandle
RegCreateKeyA
RegEnumValueA
RegDeleteValueA
RegCloseKey

ole32

CoInitialize
CoUninitialize
CoCreateGuid
StringFromCLSID
CoCreateInstance
CoInitializeSecurity

oleaut32

VariantInit
VariantClear

ws2_32

gethostbyname
WSACleanup
gethostname
inet_ntoa
htons
connect
recv
getpeername
send
setsockopt
accept
socket
closesocket
select
ioctlsocket
shutdown
WSAGetLastError
bind
listen
WSAStartup

Sections

.text
Size: 113KB - Virtual size: 113KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 35KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

bb067e381eb2a5b2a319e8bb85a19c4c

Headers

File Characteristics

Imports

kernel32

user32

advapi32

ole32

oleaut32

ws2_32

Sections

.text Size: 113KB - Virtual size: 113KB

.data Size: 35KB - Virtual size: 54KB

.text
Size: 113KB - Virtual size: 113KB

.data
Size: 35KB - Virtual size: 54KB