94f58a9604e2bd53d5fb2b5f6ef3fce5_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

94f58a9604e2bd53d5fb2b5f6ef3fce5_JaffaCakes118
Size

148KB
MD5

94f58a9604e2bd53d5fb2b5f6ef3fce5
SHA1

31bf011946fe5563dc7c8cf8958a88af243d4bca
SHA256

ee62d7d3425f1664b55bbc4c3fd20fa5b919ff56d580c6254da6ebc38a47b1bc
SHA512

f12151a841d9d264e662de91147d64e9f8d573993eaf363c6fdf904df811d4bf1a09f89b6e35449b1e9fbee71c2e803d4c5cbd2c0372089929b27ff777307a07
SSDEEP

3072:OX/Ts38uVn4qxUxIU/2eBNuog6fHhTlveo1iW27asHpqUQK:OX/Ts38G4qxUiK5BNjHhTlveo1iW27ao

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
94f58a9604e2bd53d5fb2b5f6ef3fce5_JaffaCakes118

Files

94f58a9604e2bd53d5fb2b5f6ef3fce5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1fea591f6dfc417c649c496b961e2cb3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcessHeap
lstrcatA
ExitProcess
SetFileAttributesA
MoveFileExA
FreeResource
lstrlenA
SetFileTime
LocalFileTimeToFileTime
SystemTimeToFileTime
GetLocalTime
GetTempPathA
SetLastError
GetFileAttributesA
ReadFile
HeapAlloc
GetModuleFileNameA
SetUnhandledExceptionFilter
ReleaseMutex
CreateMutexA
GetCommandLineA
GetCurrentThreadId
GetStartupInfoA
HeapFree
SizeofResource
CreateFileA
WriteFile
GetLastError
WideCharToMultiByte
MultiByteToWideChar
lstrcpyA
lstrcmpiA
GetCurrentProcessId
GetModuleHandleA
DeleteFileA
CopyFileA
CreateThread
Process32First
OpenProcess
TerminateProcess
Sleep
SetFilePointer

user32

wsprintfA
GetMessageA
PostThreadMessageA
GetInputState
GetWindowTextA
FindWindowExA
SendMessageA
ShowWindow

advapi32

InitializeSecurityDescriptor
GetSecurityDescriptorDacl
GetAclInformation
GetLengthSid
InitializeAcl
AddAce
GetAce
SetFileSecurityA
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
LookupAccountNameA
RegOpenKeyExA
RegQueryValueExA
RegDeleteValueA
RegDeleteKeyA
RegSetValueExA
RegCreateKeyExA
StartServiceA
OpenServiceA
GetFileSecurityA

msvcrt

exit
_XcptFilter
_acmdln
??1type_info@@UAE@XZ
_onexit
__dllonexit
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
_exit
realloc
_splitpath
__CxxFrameHandler
??2@YAPAXI@Z
_except_handler3
malloc
strchr
_CxxThrowException
free

netapi32

NetApiBufferFree
NetUserGetLocalGroups

Sections

.text
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 396B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xdata
Size: 4KB - Virtual size: 184B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 116KB - Virtual size: 114KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1fea591f6dfc417c649c496b961e2cb3

Headers

File Characteristics

Imports

kernel32

user32

advapi32

msvcrt

netapi32

Sections

.text Size: 12KB - Virtual size: 8KB

.bss Size: - Virtual size: 396B

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 8KB - Virtual size: 4KB

.xdata Size: 4KB - Virtual size: 184B

.rsrc Size: 116KB - Virtual size: 114KB

.text
Size: 12KB - Virtual size: 8KB

.bss
Size: - Virtual size: 396B

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 8KB - Virtual size: 4KB

.xdata
Size: 4KB - Virtual size: 184B

.rsrc
Size: 116KB - Virtual size: 114KB