8d2531b534452529a791e09aac14e53f_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

8d2531b534452529a791e09aac14e53f_JaffaCakes118
Size

55KB
MD5

8d2531b534452529a791e09aac14e53f
SHA1

d1e40e51f20409eb41160e0829b44f95add0b4c7
SHA256

44977ad1c4f181482cb4b0bc04a49c453d3daaf7cffe59bc68ea03f2ba24a771
SHA512

2670fa31caa3f9ea59db6af1bf15c3cb92bdb6c206704b5a6e58da47fcfd2f61614d6d017bd8365eb0cfae457c8d733561a2638d9e4244289d19b08f93b11972
SSDEEP

768:QOsIj3u68He1yM/saM0obt3c8+C3ef8nt0xgKEF/tSTk4Pf5D6O/QXBUqn21lrBy:QXIK6H/hBo5M8mmd1gk4PBeRU2olWZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8d2531b534452529a791e09aac14e53f_JaffaCakes118

Files

8d2531b534452529a791e09aac14e53f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4792f37992042195ae8f17889a0d60ae

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

ChangeServiceConfig2A
CreateServiceA
FreeSid
GetSecurityDescriptorControl
GetTokenInformation
LookupPrivilegeValueA
RegFlushKey
RegOpenKeyA
RegQueryInfoKeyA
SetSecurityDescriptorDacl

kernel32

CreateEventA
CreateFileA
CreateProcessA
CreateThread
DeleteCriticalSection
DisableThreadLibraryCalls
EnumSystemLocalesA
ExitProcess
ExitThread
FindFirstFileA
FreeEnvironmentStringsA
FreeLibrary
GetACP
GetConsoleCP
GetCurrentProcess
GetCurrentThreadId
GetDriveTypeA
GetEnvironmentVariableA
GetFileSize
GetLastError
GetModuleFileNameA
GetModuleHandleA
GetPrivateProfileSectionNamesA
GetPrivateProfileStructA
GetProcAddress
GetProcessHeap
GetShortPathNameA
GetStartupInfoA
GetStdHandle
GetSystemDirectoryA
GetSystemTimeAsFileTime
GetTempPathA
GetThreadLocale
GetTickCount
GetTimeZoneInformation
GetUserDefaultLCID
GetVersionExA
GlobalAlloc
GlobalFree
GlobalHandle
GlobalLock
GlobalReAlloc
GlobalUnlock
HeapAlloc
HeapCreate
HeapDestroy
HeapFree
HeapReAlloc
HeapSize
InitializeCriticalSection
InterlockedCompareExchange
InterlockedExchange
IsValidCodePage
LoadLibraryA
LoadLibraryExA
LocalAlloc
LocalFree
MoveFileA
QueryPerformanceCounter
RaiseException
RtlUnwind
SearchPathA
SetCurrentDirectoryA
SetEndOfFile
SetFileTime
SetPriorityClass
SetStdHandle
SetThreadPriority
SetUnhandledExceptionFilter
SuspendThread
SystemTimeToFileTime
TlsAlloc
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
VirtualProtect
WriteConsoleA
lstrlenA

user32

BeginPaint
CharNextA
CharPrevA
CharUpperA
CheckDlgButton
CreateWindowExA
DrawIcon
EnableMenuItem
EndPaint
GetCursorPos
GetDesktopWindow
GetFocus
GetMessagePos
GetProcessWindowStation
GetWindowLongA
IsChild
IsIconic
IsWindow
LoadCursorA
LoadIconA
MapWindowPoints
MessageBoxA
RegisterClipboardFormatA
SendDlgItemMessageA
SetCursor
SetMenu
SetWindowTextA
SystemParametersInfoA
UnhookWindowsHookEx
UnregisterClassA

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA

Sections

.text
Size: 21KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.CRT
Size: 13KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4792f37992042195ae8f17889a0d60ae

Headers

File Characteristics

Imports

advapi32

kernel32

user32

version

Sections

.text Size: 21KB - Virtual size: 24KB

.CRT Size: 13KB - Virtual size: 24KB

.data Size: 512B - Virtual size: 4KB

.rdata Size: 512B - Virtual size: 4KB

.idata Size: 3KB - Virtual size: 4KB

.edata Size: 15KB - Virtual size: 16KB

.rsrc Size: 1024B - Virtual size: 4KB

.text
Size: 21KB - Virtual size: 24KB

.CRT
Size: 13KB - Virtual size: 24KB

.data
Size: 512B - Virtual size: 4KB

.rdata
Size: 512B - Virtual size: 4KB

.idata
Size: 3KB - Virtual size: 4KB

.edata
Size: 15KB - Virtual size: 16KB

.rsrc
Size: 1024B - Virtual size: 4KB