8ab49c75b6dfa7250163bd96771ebdce_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

8ab49c75b6dfa7250163bd96771ebdce_JaffaCakes118
Size

162KB
MD5

8ab49c75b6dfa7250163bd96771ebdce
SHA1

a1f965e8ea23f397c2d6ea96a48036203382c484
SHA256

ff5a9052e475f234fa858e6a8be2ca66d0faba535f4489f89dba56a9edefaddb
SHA512

ebde6486674490ac55ea070f87fb1310e0e7d51f2f1f0e8b3693d177ae678f9918584f85a0113c4c45851d6600c5f3800ca7b59ba4682730c0c715009df38b72
SSDEEP

3072:2GXTOO2u115Q2ZXJH1VC8CSzhYY6UvwzbfZw34A3YdJDNx:n2GNJHTCvu6kwzrZwoA3YdRNx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8ab49c75b6dfa7250163bd96771ebdce_JaffaCakes118

Files

8ab49c75b6dfa7250163bd96771ebdce_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9a6781609b1138e24c199318f6807db8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mprapi

MprConfigServerConnect
MprConfigServerDisconnect
MprConfigGetFriendlyName

oleacc

LresultFromObject
AccessibleObjectFromPoint

shell32

SHGetFolderPathW

kernel32

WriteConsoleA
HeapCreate
HeapDestroy
LCMapStringA
MultiByteToWideChar
UnhandledExceptionFilter
HeapFree
IsValidCodePage
GetCurrentProcess
GetTimeZoneInformation
GetTimeFormatA
GetCPInfo
SetUnhandledExceptionFilter
RtlUnwind
FreeLibrary
LoadLibraryA
WriteFile
SetEndOfFile
ReadFile
GetACP
EnumResourceTypesA
LCMapStringW
VirtualFree
VirtualAlloc
HeapSize
RaiseException
GetStringTypeW
CompareStringW
GetCurrentProcessId
IsDebuggerPresent
CreateNamedPipeA
EnterCriticalSection
GetDateFormatA
LeaveCriticalSection
SetFilePointer
SetEnvironmentVariableA
QueryPerformanceCounter
GetOEMCP
GetLocaleInfoA
CompareStringA
TerminateProcess
GetConsoleOutputCP
GetTickCount
InitializeCriticalSection
SetStdHandle
HeapReAlloc
GetSystemTimeAsFileTime
GetStringTypeA

advapi32

CloseServiceHandle
RegOpenKeyExW
CreateServiceW
EqualSid
LookupPrivilegeNameA
LookupPrivilegeValueA
RegEnumKeyExW
SetSecurityDescriptorDacl
FreeInheritedFromArray
RegGetKeySecurity
RegDeleteValueW
RegSetValueExW
IsValidAcl
LookupAccountSidW
EnumDependentServicesW
RegDeleteKeyW
GetSecurityDescriptorControl
UnlockServiceDatabase
OpenSCManagerW
OpenProcessToken
InitializeAcl
ChangeServiceConfigW
AllocateAndInitializeSid
GetInheritanceSourceW
AdjustTokenPrivileges
LookupPrivilegeDisplayNameA
ControlService
ChangeServiceConfig2W
SetNamedSecurityInfoW
RegCloseKey
RegQueryValueExW
QueryServiceStatus
StartServiceA
GetTokenInformation
LockServiceDatabase
GetNamedSecurityInfoW
AddAce
OpenServiceW
IsValidSecurityDescriptor
GetSecurityInfo
GetAce
RegSaveKeyW
QueryServiceLockStatusW
FreeSid
RegRestoreKeyW
InitializeSecurityDescriptor
DeleteService
RegCreateKeyExW
SetSecurityInfo
QueryServiceConfigW
GetAclInformation
SetEntriesInAclW
SetEntriesInAclA
RegEnumValueW

newdev

UpdateDriverForPlugAndPlayDevicesW

Sections

.text
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 407KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 113KB - Virtual size: 113KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9a6781609b1138e24c199318f6807db8

Headers

File Characteristics

Imports

mprapi

oleacc

shell32

kernel32

advapi32

newdev

Sections

.text Size: 44KB - Virtual size: 43KB

.rdata Size: 3KB - Virtual size: 407KB

.data Size: 113KB - Virtual size: 113KB

.rsrc Size: 512B - Virtual size: 4KB

.text
Size: 44KB - Virtual size: 43KB

.rdata
Size: 3KB - Virtual size: 407KB

.data
Size: 113KB - Virtual size: 113KB

.rsrc
Size: 512B - Virtual size: 4KB