8efea2af79b619ed0ac8d5e890f2f412_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

8efea2af79b619ed0ac8d5e890f2f412_JaffaCakes118
Size

250KB
MD5

8efea2af79b619ed0ac8d5e890f2f412
SHA1

f6f4c8549b147b28ffa21e1df2fcc439a67bb9aa
SHA256

debd0933e4da9430cb3311566257a6a98b19d8d7291750fd961ff5bc9d41d703
SHA512

8a284d44979f3604ebef0969290cfdd8b3216b3f24ab6818c907313eaa169f96afcc1bc9d215158b8afe2bd01804c53300678a94d257e5e2cdc92fd4bae2a644
SSDEEP

6144:0cjlsubtn6BV+/1PSSggDhBkLq2pjMoyYKRKESBv:9iuZ6Bq1aMWqBTSV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8efea2af79b619ed0ac8d5e890f2f412_JaffaCakes118

Files

8efea2af79b619ed0ac8d5e890f2f412_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5ac02522db7668811dd224a0577fb68a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

RemoveDirectoryW
CreateEventW
OpenEventW
CloseHandle
FreeLibrary
GetPriorityClass
lstrcpynW
ResetEvent
WaitForMultipleObjects
CreateDirectoryW
GetPrivateProfileStringW
WritePrivateProfileStringW
LocalFree
SetErrorMode
WideCharToMultiByte
OutputDebugStringW
GetModuleHandleW
CreateProcessW
OpenProcess
WaitForSingleObject
SetProcessWorkingSetSize
MulDiv
CreateFileW
DeleteFileW
SetFileAttributesW
WriteFile
LoadLibraryExW
DeviceIoControl
ExpandEnvironmentStringsA
IsDebuggerPresent
UnhandledExceptionFilter
GetSystemTimeAsFileTime
GetCurrentThreadId
SetUnhandledExceptionFilter
PulseEvent
GetLocalTime
GetProcAddress

user32

LoadStringW
KillTimer
PostMessageW
GetSubMenu
SetForegroundWindow
LoadMenuW
AppendMenuW
GetCursorPos
CreatePopupMenu
GetMenuItemCount
RemoveMenu
SetMenuDefaultItem
GetClientRect
RedrawWindow
SetWindowPos
IsWindowVisible
GetDlgCtrlID
GetWindowRect
GetParent
GetDC
ReleaseDC
TranslateAcceleratorW
EnableWindow
SetTimer
PostQuitMessage
RegisterWindowMessageW
LoadImageW
LoadIconW
SendMessageW
UpdateWindow
GetForegroundWindow

gdi32

CreatePatternBrush
DeleteObject
GetObjectW
GetPixel
CreateSolidBrush
CreateCompatibleDC
GetDeviceCaps
RealizePalette
BitBlt
GetDIBColorTable
CreateHalftonePalette
CreateFontIndirectW
GetTextExtentPoint32W
GetStockObject
CreatePalette

advapi32

RegOpenKeyExA
RegQueryValueExA
OpenSCManagerW
OpenServiceW
QueryServiceStatus
StartServiceW
CloseServiceHandle
SetEntriesInAclW
RegDeleteValueW
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
FreeSid
AllocateAndInitializeSid
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
GetUserNameW

shell32

Shell_NotifyIconW
ShellExecuteW

msoert2

PszAllocA

iaspolcy

DllGetClassObject
DllRegisterServer

Sections

.text
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.aeN
Size: 1024B - Virtual size: 1005B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.uJm
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.qQn
Size: 512B - Virtual size: 329B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.wkrcoE
Size: 1KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.SfH
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.oCs
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.iaQU
Size: 512B - Virtual size: 805B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 213KB - Virtual size: 255KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Xij
Size: 1KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.F
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.XSOpU
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5ac02522db7668811dd224a0577fb68a

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

msoert2

iaspolcy

Sections

.text Size: 17KB - Virtual size: 16KB

.aeN Size: 1024B - Virtual size: 1005B

.uJm Size: 1KB - Virtual size: 1KB

.rdata Size: 3KB - Virtual size: 2KB

.qQn Size: 512B - Virtual size: 329B

.wkrcoE Size: 1KB - Virtual size: 2KB

.SfH Size: 1KB - Virtual size: 1KB

.oCs Size: 1024B - Virtual size: 1KB

.iaQU Size: 512B - Virtual size: 805B

.data Size: 213KB - Virtual size: 255KB

.Xij Size: 1KB - Virtual size: 2KB

.F Size: 1024B - Virtual size: 1KB

.XSOpU Size: 2KB - Virtual size: 3KB

.rsrc Size: 3KB - Virtual size: 3KB

.text
Size: 17KB - Virtual size: 16KB

.aeN
Size: 1024B - Virtual size: 1005B

.uJm
Size: 1KB - Virtual size: 1KB

.rdata
Size: 3KB - Virtual size: 2KB

.qQn
Size: 512B - Virtual size: 329B

.wkrcoE
Size: 1KB - Virtual size: 2KB

.SfH
Size: 1KB - Virtual size: 1KB

.oCs
Size: 1024B - Virtual size: 1KB

.iaQU
Size: 512B - Virtual size: 805B

.data
Size: 213KB - Virtual size: 255KB

.Xij
Size: 1KB - Virtual size: 2KB

.F
Size: 1024B - Virtual size: 1KB

.XSOpU
Size: 2KB - Virtual size: 3KB

.rsrc
Size: 3KB - Virtual size: 3KB