a340beee26e4e676037f9572a8a2667d_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

a340beee26e4e676037f9572a8a2667d_JaffaCakes118
Size

59KB
MD5

a340beee26e4e676037f9572a8a2667d
SHA1

712ab4ead0f5f4fe5da50a98ac4e0f0c3ff874e0
SHA256

6a7e2e063a6d473388f69ba7b75e137f2edc08b326331842bcaab7a4245a1e01
SHA512

c2fd85b50bcd4091cf593a7a7615c407616918156200276cdaefd16ce8e8978892e64f84f5e67f240430ae74c1880e84ff4cd8b9aa803039b0510826db053540
SSDEEP

1536:SeF0RDe+evOB4+Hk1lnuDtCA37k3gAMY+kjvFPZ8:f01eYTuFuDtCQ7k3gAMY+aZZ8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a340beee26e4e676037f9572a8a2667d_JaffaCakes118

Files

a340beee26e4e676037f9572a8a2667d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e42ddfa6617040360fb2e8eb7a2e6824

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

AllocateAndInitializeSid
EqualSid
FreeSid
GetUserNameA
RegDeleteKeyA
RegEnumKeyExA
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA

kernel32

CloseHandle
CopyFileA
CreateEventA
CreateMutexA
DeleteAtom
DeleteCriticalSection
DeviceIoControl
DuplicateHandle
ExitProcess
ExpandEnvironmentStringsA
FileTimeToLocalFileTime
FindNextFileA
FormatMessageA
FreeEnvironmentStringsA
GetCPInfo
GetCommandLineA
GetConsoleMode
GetCurrentProcess
GetCurrentThreadId
GetDriveTypeA
GetFileSize
GetLastError
GetLocalTime
GetModuleHandleA
GetOEMCP
GetPrivateProfileSectionA
GetPrivateProfileStructA
GetProcAddress
GetProcessHeap
GetStdHandle
GetStringTypeA
GetSystemInfo
GetSystemTime
GetSystemTimeAsFileTime
GetTempFileNameA
GetThreadLocale
GetTickCount
GetTimeZoneInformation
GetVersionExA
GlobalFree
GlobalLock
GlobalReAlloc
HeapCreate
HeapDestroy
InitializeCriticalSection
InterlockedCompareExchange
IsBadCodePtr
IsBadWritePtr
IsDebuggerPresent
IsValidCodePage
LCMapStringA
LeaveCriticalSection
LoadLibraryA
MoveFileA
OpenEventA
OpenProcess
QueryPerformanceCounter
ReadFile
ReleaseMutex
RtlUnwind
SearchPathA
SetEnvironmentVariableA
SetEvent
SetFileAttributesA
SetFilePointer
SetThreadPriority
SizeofResource
Sleep
TlsAlloc
TlsFree
TlsGetValue
UnmapViewOfFile
VirtualAlloc
VirtualQuery
lstrcatA
lstrcmpiA
lstrcpyA

user32

CharNextA
CharUpperA
CheckDlgButton
DestroyIcon
DestroyWindow
DrawFocusRect
EnableWindow
GetFocus
GetMenuItemCount
GetMessagePos
GetSubMenu
GetSystemMenu
GetWindowDC
IsWindow
IsWindowVisible
MessageBoxA
RegisterClassA
RegisterWindowMessageA
SendDlgItemMessageA
SetDlgItemTextA
SetForegroundWindow
SetMenu
SetTimer
SetWindowTextA
ShowWindow
TrackPopupMenu
UpdateWindow
wsprintfA

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA

Sections

.text
Size: 22KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.CRT
Size: 14KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e42ddfa6617040360fb2e8eb7a2e6824

Headers

File Characteristics

Imports

advapi32

kernel32

user32

version

Sections

.text Size: 22KB - Virtual size: 24KB

.CRT Size: 14KB - Virtual size: 24KB

.data Size: 512B - Virtual size: 4KB

.rdata Size: 512B - Virtual size: 4KB

.idata Size: 3KB - Virtual size: 4KB

.edata Size: 15KB - Virtual size: 16KB

.rsrc Size: 1024B - Virtual size: 4KB

.text
Size: 22KB - Virtual size: 24KB

.CRT
Size: 14KB - Virtual size: 24KB

.data
Size: 512B - Virtual size: 4KB

.rdata
Size: 512B - Virtual size: 4KB

.idata
Size: 3KB - Virtual size: 4KB

.edata
Size: 15KB - Virtual size: 16KB

.rsrc
Size: 1024B - Virtual size: 4KB