8ef19e2bfc4dd0842dca8c9d6535cec8_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

8ef19e2bfc4dd0842dca8c9d6535cec8_JaffaCakes118
Size

26KB
MD5

8ef19e2bfc4dd0842dca8c9d6535cec8
SHA1

d6df6c81aadb17b23dea8e96b3cf14ebc9137e6e
SHA256

07976da1e129ce7305a4e93786713039b1f35ed0254b8744919feaa0db91f3f8
SHA512

529927b981ec280a9d5d7061d16db8279f14ebf0224a44d5ce0f407be4f7da0c212dcdddadaa5f283cfac4619ae8d6f886ceac4be9d33e8ae99111185295d72a
SSDEEP

384:HMWShb/b4ZAGrGRXDb+OqqM0ul/0ovTxUuNsRunCF6G+PsMDjlCW:HMhb/kGBDb+OE7yQULM9zsMPs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8ef19e2bfc4dd0842dca8c9d6535cec8_JaffaCakes118

Files

8ef19e2bfc4dd0842dca8c9d6535cec8_JaffaCakes118
.exe windows:5 windows x86 arch:x86

f0e1f6aacb29ec80e956788aab2c295a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

oleaut32

VariantClear

setupapi

SetupCommitFileQueueW
SetupQueueCopyW
SetupSetDirectoryIdW
SetupDefaultQueueCallbackW
SetupCloseFileQueue
SetupInitDefaultQueueCallbackEx
SetupInstallFromInfSectionW
SetupTermDefaultQueueCallback
SetupGetLineTextW
SetupCloseInfFile
SetupOpenInfFileW
SetupFindFirstLineW
SetupFindNextLine
SetupOpenAppendInfFileW
SetupOpenFileQueue
SetupGetStringFieldW

advapi32

RegSetValueExW
GetTokenInformation
RegFlushKey
RegDeleteValueW
RegUnLoadKeyW
RegEnumKeyW
RegCloseKey
OpenProcessToken
FreeSid
EqualSid
RegLoadKeyW
AllocateAndInitializeSid
RegOpenKeyExA
AdjustTokenPrivileges
RegSetValueW
LookupPrivilegeValueW
RegOpenKeyExW
RegCreateKeyExW
RegSaveKeyW
RegEnumValueW
RegQueryValueExW
RegQueryValueExA
RegDeleteKeyW
RegQueryInfoKeyW

msvcrt

_adjust_fdiv
_wtoi
_vsnprintf
_wcsicmp
memset
_XcptFilter
malloc
_setjmp3
_wcsnicmp
_amsg_exit
longjmp
memmove
bsearch
_wtol
memcpy
free
_initterm
_vsnwprintf
_ultow

kernel32

GetStartupInfoA

rpcrt4

RpcStringFreeW

shlwapi

StrStrIW
PathCombineW
PathAddBackslashW
PathRemoveFileSpecW
PathAppendW
PathBuildRootW
StrChrW
PathFileExistsW
StrRChrW

gdi32

GetDeviceCaps
DeleteObject
GetObjectW
CreateFontIndirectW
GetStockObject

ole32

OleInitialize
OleUninitialize
CoTaskMemFree

version

VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW

ntdll

RtlAdjustPrivilege
NtAllocateVirtualMemory

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 5KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

f0e1f6aacb29ec80e956788aab2c295a

Headers

DLL Characteristics

File Characteristics

Imports

oleaut32

setupapi

advapi32

msvcrt

kernel32

rpcrt4

shlwapi

gdi32

ole32

version

ntdll

Sections

.text Size: 4KB - Virtual size: 4KB

.rsrc Size: 15KB - Virtual size: 14KB

.data Size: 512B - Virtual size: 40KB

.rdata Size: 5KB - Virtual size: 80KB

.text
Size: 4KB - Virtual size: 4KB

.rsrc
Size: 15KB - Virtual size: 14KB

.data
Size: 512B - Virtual size: 40KB

.rdata
Size: 5KB - Virtual size: 80KB