8668eaa5b244cd70f835e49a161ed10b_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

8668eaa5b244cd70f835e49a161ed10b_JaffaCakes118
Size

4.3MB
MD5

8668eaa5b244cd70f835e49a161ed10b
SHA1

c557e6bdb013eba5bf7da71764baac97e4bc0ac3
SHA256

2086828e0ecaab38a0af58e3cfed627147bd9a7105d5529d53597049251a7279
SHA512

088ae012c2c5d6f9172bae20f51593a10c6d3f41e8f525aa5a213d870eec84e114bb62f0a6f23ec324111f172703d86f8857dcd55abf56327caa0ff3071e6d5f
SSDEEP

98304:tDtU01n6XV2IiAJg7pSOXhXO8lcTVHs5ZN7Jh+AK6G:BtUen6XMIiAm7zXdO8l+VHMF+6G

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8668eaa5b244cd70f835e49a161ed10b_JaffaCakes118

Files

8668eaa5b244cd70f835e49a161ed10b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

93a5b1d978fe8b973a889d48f50be3a3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTimeZoneInformation
ReadFileScatter
GetSystemTimeAsFileTime
GlobalReAlloc
SetMailslotInfo
WriteFile
GetFileInformationByHandle
FindFirstFileExW
SetStdHandle
Beep
lstrcpyA
GetEnvironmentVariableW
WritePrivateProfileStringW
FatalAppExitA
VirtualUnlock
FindResourceExA
GenerateConsoleCtrlEvent
LeaveCriticalSection
SetEnvironmentVariableA
FreeLibraryAndExitThread
PulseEvent
SetNamedPipeHandleState
DosDateTimeToFileTime
CreateProcessA
GlobalFlags
MoveFileExA
GetCompressedFileSizeW
GetWindowsDirectoryA
SetCurrentDirectoryA
OpenFile
EnumResourceNamesW
IsBadReadPtr
WritePrivateProfileSectionA
FileTimeToLocalFileTime
GetDiskFreeSpaceExA
GlobalDeleteAtom
GlobalFree
ReadConsoleA
GetCommState
WriteConsoleOutputW
GetShortPathNameA
EnumDateFormatsW
FindNextChangeNotification
CreateWaitableTimerA
GetSystemDirectoryW
GetACP
GetTapeStatus
GetOEMCP
GlobalAddAtomA
SetVolumeLabelA
ExitThread
ReleaseSemaphore
OutputDebugStringW
GetPrivateProfileStringW
SetTimeZoneInformation
GetDiskFreeSpaceW
lstrcmpA
CreatePipe
GetProcessTimes
ReleaseMutex
FlushConsoleInputBuffer
SizeofResource
WriteConsoleOutputCharacterA
ClearCommBreak
DuplicateHandle
PeekConsoleInputW
EnumResourceLanguagesW
EnumCalendarInfoW
ReadFile
GetProfileIntA
VirtualQuery
lstrcatW
LoadLibraryExA
GlobalFindAtomW
QueryDosDeviceW
SetThreadAffinityMask
GetUserDefaultLangID
DeleteCriticalSection
SwitchToFiber
GetSystemInfo
CreateDirectoryW
CreateIoCompletionPort
LocalAlloc
ExitProcess

user32

DispatchMessageA

gdi32

StartPage
SetBkMode
PlayMetaFileRecord
OffsetWindowOrgEx
SelectClipRgn
SetBitmapBits
GetObjectW
GetStockObject
RemoveFontResourceW
CreateRectRgn
CreateDiscardableBitmap
SetWindowExtEx
CreateEnhMetaFileA
GetDIBColorTable
DeleteObject
PathToRegion

advapi32

CryptVerifySignatureA
SetSecurityDescriptorDacl
LookupPrivilegeDisplayNameA
NotifyBootConfigStatus
OpenSCManagerA
CryptAcquireContextW
RegEnumKeyExA
RegOpenKeyExA
RegisterServiceCtrlHandlerW
RegQueryValueExA
InitiateSystemShutdownW
AllocateLocallyUniqueId

ole32

StgCreateStorageEx
CoMarshalInterface
GetRunningObjectTable
OleSaveToStream
CoInitializeEx
CoReleaseMarshalData
ReadFmtUserTypeStg

oleaut32

SetErrorInfo
VariantChangeType

comctl32

ImageList_DragMove
ImageList_GetDragImage

shlwapi

PathUnquoteSpacesA
PathRemoveBackslashW

Sections

.text
Size: 5KB - Virtual size: 224KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4.0MB - Virtual size: 4.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

93a5b1d978fe8b973a889d48f50be3a3

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

ole32

oleaut32

comctl32

shlwapi

Sections

.text Size: 5KB - Virtual size: 224KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 4.0MB - Virtual size: 4.0MB

.rsrc Size: 19KB - Virtual size: 18KB

.text
Size: 5KB - Virtual size: 224KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 4.0MB - Virtual size: 4.0MB

.rsrc
Size: 19KB - Virtual size: 18KB