88a5327e9a8a6105e328c3d0cd6d71b6_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

88a5327e9a8a6105e328c3d0cd6d71b6_JaffaCakes118
Size

3.8MB
MD5

88a5327e9a8a6105e328c3d0cd6d71b6
SHA1

787763a94d8ea923d19bb59949918761a13f406a
SHA256

e53b4a90e230dc04cb0c65a893560108391fbd81a2c98ce9c8ffa18d81bf95de
SHA512

d052b5c5d8e2f07cf840b8c7fc5cca2bccb9d8d3afff0fd8ff789c2d81b5c2dbf56e5b1fcd91dafd02b5e149a8ab85693c5f20d38bd7beea0148e1fafc6b9002
SSDEEP

98304:2PFiLgHEenAfd/WGNvpxLusmddB00RngG8As:2SuEvlOCusm+AgND

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
88a5327e9a8a6105e328c3d0cd6d71b6_JaffaCakes118

Files

88a5327e9a8a6105e328c3d0cd6d71b6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

215c35187ea8ee35fecb40685e1df41a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReadDirectoryChangesW
VirtualAllocEx
VirtualLock
GetStartupInfoA
SetFileTime
RemoveDirectoryA
SetProcessAffinityMask
DeleteCriticalSection
SystemTimeToFileTime
GetModuleHandleA
GlobalFindAtomW
SetConsoleTitleA
GetFileInformationByHandle
GetCurrentDirectoryW
FatalAppExitA
GetCommandLineW
EnumSystemCodePagesA
VirtualProtect
GetTapeStatus
GetWindowsDirectoryA
WritePrivateProfileSectionW
GetCompressedFileSizeW
GetTempPathW
ReadFile
CreateIoCompletionPort
EnumCalendarInfoW
SetFileAttributesA
PrepareTape
FindFirstFileW
ReadFileScatter
SetCurrentDirectoryA
SetTimeZoneInformation
RaiseException
ReadConsoleOutputA
lstrcpyA
DuplicateHandle
DebugBreak
CreateDirectoryA
LoadLibraryExW
EnumResourceLanguagesW
ExitProcess

user32

UnhookWindowsHook
LoadImageW
CreateWindowStationW
SendDlgItemMessageA
GetMessageTime
GetSubMenu
DestroyMenu
UnregisterClassA
SetLastErrorEx
TrackMouseEvent
EndPaint
DrawTextExA
GetWindowContextHelpId
ShowCaret
UnionRect
CallNextHookEx
MapVirtualKeyExW
GetWindowRgn
DialogBoxIndirectParamW
CloseDesktop
ShowCursor
GetProcessWindowStation
SendMessageCallbackW
SetUserObjectInformationW
TranslateMessage
GetKeyboardLayoutNameA
LoadKeyboardLayoutW
CallWindowProcA
SetScrollRange
EnumDesktopWindows
UnregisterClassW
SetScrollPos

comctl32

ImageList_SetImageCount

advapi32

OpenSCManagerA
SetEntriesInAclW
ControlService
RegEnumValueA
LookupAccountSidA
CryptDeriveKey
RegEnumValueW
RegEnumKeyExW
ReportEventW
CryptSetProvParam
InitializeAcl
SetEntriesInAclA
RegLoadKeyW
RegRestoreKeyA
RegQueryInfoKeyW

version

VerQueryValueA

msvcrt

_isatty
_open_osfhandle
_close
_ultoa
wcstombs
_dup2
_fdopen
_tzset
fgetc
_wcsicoll
_pipe

Sections

.text
Size: 14KB - Virtual size: 233KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3.5MB - Virtual size: 3.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

215c35187ea8ee35fecb40685e1df41a

Headers

File Characteristics

Imports

kernel32

user32

comctl32

advapi32

version

msvcrt

Sections

.text Size: 14KB - Virtual size: 233KB

.rdata Size: 3KB - Virtual size: 2KB

.data Size: 3.5MB - Virtual size: 3.5MB

.rsrc Size: 19KB - Virtual size: 18KB

.text
Size: 14KB - Virtual size: 233KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 3.5MB - Virtual size: 3.5MB

.rsrc
Size: 19KB - Virtual size: 18KB