87a650c9f92b89980679a0e5bb9f8cb3_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

87a650c9f92b89980679a0e5bb9f8cb3_JaffaCakes118
Size

274KB
MD5

87a650c9f92b89980679a0e5bb9f8cb3
SHA1

2e4161599e198610e2dfbc8ced765983292fb87f
SHA256

8041e2d3be829e6dac05021dd042cb8cc11b4383130e3192f40073a2b8d6967e
SHA512

d197c34b895933a21d479c053aa8555ee79ee927533d3202481f9672c70431585d2fe6d7cc33656e338aaadc399c82b30335c19ede37e15eaf00f530e02e73b1
SSDEEP

6144:pmwed2qXnxBpk/cwpjPr67peWHEGt+CNN1H5eXmR:pmwedTntk/cwpjuYWH5ECN/HUXq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
87a650c9f92b89980679a0e5bb9f8cb3_JaffaCakes118

Files

87a650c9f92b89980679a0e5bb9f8cb3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8f0bbabc37d1eac880aa203344dbf296

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

WSACleanup
WSAGetLastError
WSACreateEvent
WSACloseEvent
socket
closesocket
gethostbyname
ntohs
send
recv
shutdown
connect
WSAEnumNetworkEvents
WSAAccept
htonl
htons
bind
listen
WSAEventSelect
inet_addr
gethostname
WSAStartup

urlmon

FindMimeFromData

kernel32

WaitForMultipleObjects
lstrlenW
lstrcpynW
CreateDirectoryW
WaitForSingleObject
LocalFree
CreateEventW
lstrcpyW
OpenEventW
CreateMutexW
GetModuleHandleW
GetTempPathW
GetTimeFormatW
GetDateFormatW
GetLocalTime
FreeLibrary
TlsAlloc
GetProcessHeap
GetCurrentThreadId
IsDebuggerPresent
SetUnhandledExceptionFilter
LoadLibraryW
GetProcAddress

advapi32

ConvertStringSidToSidW
CreateProcessAsUserW
RegisterServiceCtrlHandlerW
SetServiceStatus
StartServiceCtrlDispatcherW
ControlService
DeleteService
CreateServiceW
OpenSCManagerW
OpenServiceW
CloseServiceHandle
RegConnectRegistryW
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
ConvertStringSecurityDescriptorToSecurityDescriptorW
StartServiceW
QueryServiceStatus
LookupPrivilegeValueW
AdjustTokenPrivileges
GetSecurityInfo
GetSecurityDescriptorDacl
GetUserNameW
BuildExplicitAccessWithNameW
SetEntriesInAclW
SetSecurityInfo
DuplicateTokenEx
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
OpenProcessToken
GetTokenInformation
LookupAccountSidW
SetTokenInformation

ole32

CoCreateInstance
CoInitialize
CoUninitialize

user32

wsprintfW

quartz

AMGetErrorTextW
DllCanUnloadNow

browseui

DllGetVersion

Sections

.text
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.l
Size: 1024B - Virtual size: 200KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.Mz
Size: 5KB - Virtual size: 574KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.dCisa
Size: 1KB - Virtual size: 193KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.chhYG
Size: 4KB - Virtual size: 81KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.vR
Size: 4KB - Virtual size: 321KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.u
Size: 98KB - Virtual size: 175KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.jBANt
Size: 1KB - Virtual size: 131KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.w
Size: 4KB - Virtual size: 453KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 275KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.M
Size: 122KB - Virtual size: 174KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.iHQMi
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8f0bbabc37d1eac880aa203344dbf296

Headers

File Characteristics

Imports

ws2_32

urlmon

kernel32

advapi32

ole32

user32

quartz

browseui

Sections

.text Size: 17KB - Virtual size: 16KB

.l Size: 1024B - Virtual size: 200KB

.Mz Size: 5KB - Virtual size: 574KB

.dCisa Size: 1KB - Virtual size: 193KB

.rdata Size: 2KB - Virtual size: 8KB

.chhYG Size: 4KB - Virtual size: 81KB

.vR Size: 4KB - Virtual size: 321KB

.u Size: 98KB - Virtual size: 175KB

.jBANt Size: 1KB - Virtual size: 131KB

.w Size: 4KB - Virtual size: 453KB

.data Size: 6KB - Virtual size: 275KB

.M Size: 122KB - Virtual size: 174KB

.iHQMi Size: 2KB - Virtual size: 4KB

.rsrc Size: 2KB - Virtual size: 2KB

.text
Size: 17KB - Virtual size: 16KB

.l
Size: 1024B - Virtual size: 200KB

.Mz
Size: 5KB - Virtual size: 574KB

.dCisa
Size: 1KB - Virtual size: 193KB

.rdata
Size: 2KB - Virtual size: 8KB

.chhYG
Size: 4KB - Virtual size: 81KB

.vR
Size: 4KB - Virtual size: 321KB

.u
Size: 98KB - Virtual size: 175KB

.jBANt
Size: 1KB - Virtual size: 131KB

.w
Size: 4KB - Virtual size: 453KB

.data
Size: 6KB - Virtual size: 275KB

.M
Size: 122KB - Virtual size: 174KB

.iHQMi
Size: 2KB - Virtual size: 4KB

.rsrc
Size: 2KB - Virtual size: 2KB