8bd48434d5a7cbebcef39fef1f5de1d5_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

8bd48434d5a7cbebcef39fef1f5de1d5_JaffaCakes118
Size

83KB
MD5

8bd48434d5a7cbebcef39fef1f5de1d5
SHA1

80776a5370a607b8d848792e56ca990ea80aa52b
SHA256

b3ff6331a01510c2e255cf6acf6e2ddb649c5990b543b39def651b24f9cb0c8b
SHA512

f393795cbb320a2755c91dfee288a9834b09c999ab592f839b376fbd3ea55f237d5638a66597b00f8c5471c881e58f1090ed39bb651094b137e0167428ad2c9b
SSDEEP

1536:rT+mlm/kWthv9ixH4uYPXAPrbTSpQ0Wh4wH9c6GTJRUPcEqPv4rvgaV5NYXOBG/V:rTvlqdth16HWvMrnSpQ0WSPRRwtb4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8bd48434d5a7cbebcef39fef1f5de1d5_JaffaCakes118

Files

8bd48434d5a7cbebcef39fef1f5de1d5_JaffaCakes118
.exe windows:5 windows x86 arch:x86

d6bc4a064157f7ba8abb0ad9fcd9074e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcessId
_lread
MoveFileWithProgressA
ActivateActCtx
BuildCommDCBAndTimeoutsA
SetFirmwareEnvironmentVariableA
VirtualAlloc
ChangeTimerQueueTimer
LoadLibraryA
PeekNamedPipe
WriteTapemark
SetLocaleInfoW
lstrcat
SetComputerNameW
QueryPerformanceFrequency

oleaut32

VarDecInt
VarR4FromI1
VarBstrFromUI8
SafeArrayUnlock
CreateErrorInfo
VarAdd
VarDecFromR8
VarUI4FromBool
OleCreatePropertyFrame
VarUI8FromDate
DispGetParam
SafeArrayCreateVector
VarBoolFromCy
VarI4FromR8
VarDecFromBool

samlib

SamQueryInformationDomain
SamOpenDomain
SamGetMembersInAlias
SamDeleteUser
SamEnumerateGroupsInDomain
SamCreateGroupInDomain
SamQueryInformationGroup
SamSetInformationGroup
SamQuerySecurityObject
SamiChangePasswordUser
SamEnumerateDomainsInSamServer
SamCreateAliasInDomain
SamAddMemberToGroup
SamChangePasswordUser3
SamCreateUser2InDomain
SamOpenUser

msvcp60

??1?$basic_iostream@GU?$char_traits@G@std@@@std@@UAE@XZ
?decimal_point@?$numpunct@D@std@@QBEDXZ
?in@?$codecvt@DDH@std@@QBEHAAHPBD1AAPBDPAD3AAPAD@Z
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
?swap@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXAAV12@@Z
?imag@?$_Complex_base@N@std@@QBENXZ
_Eps
??1?$codecvt@DDH@std@@UAE@XZ
??4?$basic_fstream@GU?$char_traits@G@std@@@std@@QAEAAV01@ABV01@@Z
?insert@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@IIG@Z
??_8?$basic_ofstream@DU?$char_traits@D@std@@@std@@7B@
?sungetc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAEGXZ
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@PBC@Z
?_Psum@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDPBDI@Z
?do_falsename@?$numpunct@D@std@@MBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
?ws@std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@1@AAV21@@Z

ntdll

RtlTryEnterCriticalSection
NtSetBootEntryOrder
ZwSetValueKey
NtSetTimerResolution
RtlStartRXact
NtVdmControl
ZwWaitForSingleObject
NtPrivilegeObjectAuditAlarm
RtlInitMemoryStream
ZwSetSystemEnvironmentValueEx
ZwQueryInformationPort
NtFlushBuffersFile
RtlDowncaseUnicodeString
ZwOpenFile
NtCallbackReturn

Sections

.text
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 216B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d6bc4a064157f7ba8abb0ad9fcd9074e

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

oleaut32

samlib

msvcp60

ntdll

Sections

.text Size: 39KB - Virtual size: 38KB

.rdata Size: 3KB - Virtual size: 2KB

.data Size: 20KB - Virtual size: 27KB

.rsrc Size: 19KB - Virtual size: 19KB

.reloc Size: 512B - Virtual size: 216B

.text
Size: 39KB - Virtual size: 38KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 20KB - Virtual size: 27KB

.rsrc
Size: 19KB - Virtual size: 19KB

.reloc
Size: 512B - Virtual size: 216B