a33480f656be73e5bef00790850fd707_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

a33480f656be73e5bef00790850fd707_JaffaCakes118
Size

192KB
MD5

a33480f656be73e5bef00790850fd707
SHA1

c200806da88bb92fbda9c3ac8da143d6fef8178d
SHA256

0437ce1b6f46df89c69772e676075bf42c55b2e50e0990b1918e5ba151c03581
SHA512

ef16d1506de3145f4f5621651e5a3c3c16a2c15e7dc28d95507a3b9414c5ebf8914fae472d3a7a6791a36353a1a2ecf187cdc42f9aa11acbc37d796868ebfcc1
SSDEEP

3072:vxSeXFmSSENalqJo4saQ4xgy8fAGFNzcXI0wjbleYhilYhQBWh4FS:ceXFmSSElzh/xgy8fFXzcXIjblery6E

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a33480f656be73e5bef00790850fd707_JaffaCakes118

Files

a33480f656be73e5bef00790850fd707_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5b6d71aeaf65b81fe56c4f0e9629520b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapFree
HeapAlloc
GetProcessHeap
lstrcatA
ExitProcess
SetFileAttributesA
MoveFileExA
FreeResource
lstrlenA
SetFileTime
LocalFileTimeToFileTime
SystemTimeToFileTime
GetLocalTime
GetTempPathA
SetLastError
GetFileAttributesA
SetFilePointer
GetModuleFileNameA
SetUnhandledExceptionFilter
ReleaseMutex
CreateMutexA
GetCommandLineA
GetCurrentThreadId
GetStartupInfoA
SizeofResource
CreateFileA
WriteFile
GetLastError
WideCharToMultiByte
MultiByteToWideChar
lstrcpyA
lstrcmpiA
GetModuleHandleA
DeleteFileA
Sleep
ReadFile

user32

wsprintfA
GetMessageA
PostThreadMessageA
GetInputState

advapi32

GetLengthSid
InitializeSecurityDescriptor
GetSecurityDescriptorDacl
GetAclInformation
InitializeAcl
AddAce
GetAce
SetFileSecurityA
LookupAccountNameA
RegOpenKeyExA
RegQueryValueExA
RegDeleteValueA
RegDeleteKeyA
RegSetValueExA
RegCreateKeyExA
StartServiceA
OpenServiceA
GetFileSecurityA

msvcrt

exit
_XcptFilter
_acmdln
??1type_info@@UAE@XZ
_onexit
__dllonexit
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
_exit
__CxxFrameHandler
??2@YAPAXI@Z
_except_handler3
realloc
malloc
strchr
_CxxThrowException
free

netapi32

NetUserGetLocalGroups
NetApiBufferFree

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 396B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xdata
Size: 4KB - Virtual size: 184B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 164KB - Virtual size: 160KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5b6d71aeaf65b81fe56c4f0e9629520b

Headers

File Characteristics

Imports

kernel32

user32

advapi32

msvcrt

netapi32

Sections

.text Size: 8KB - Virtual size: 7KB

.bss Size: - Virtual size: 396B

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 8KB - Virtual size: 5KB

.xdata Size: 4KB - Virtual size: 184B

.rsrc Size: 164KB - Virtual size: 160KB

.text
Size: 8KB - Virtual size: 7KB

.bss
Size: - Virtual size: 396B

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 8KB - Virtual size: 5KB

.xdata
Size: 4KB - Virtual size: 184B

.rsrc
Size: 164KB - Virtual size: 160KB