a9f5a45841abe45be2fc6fd8f9cd028f_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

a9f5a45841abe45be2fc6fd8f9cd028f_JaffaCakes118
Size

168KB
MD5

a9f5a45841abe45be2fc6fd8f9cd028f
SHA1

ab90c743ca90b6bd4c0817977ed492af46c74091
SHA256

52707293ef54fd249e7ee7354e93635ad48e4ce607616076bce73cdff475e959
SHA512

a9108d1ef712efa5b2171a008775a1fd62aa4c7b0ab191636602f7e247ea7c1ce2cbc7276675cfb8bca79cfa69ab7c8acd6fb226afc682d1508a5387b548abd6
SSDEEP

3072:k02RCXtj4OB2EEkxjtiLz00T1pOYvcEr4SF6Evm3b2syXxAP:n2QdR2qxjtiX00hcE5xvUHyhK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a9f5a45841abe45be2fc6fd8f9cd028f_JaffaCakes118

Files

a9f5a45841abe45be2fc6fd8f9cd028f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

32e7af7d4a558c84cf88da7fffcdc166

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

rpcrt4

UuidCreate

kernel32

GetStdHandle
GetModuleHandleA
MoveFileExW
ExpandEnvironmentStringsW
GetTimeFormatA
EnterCriticalSection
VirtualAlloc
Sleep
InitializeCriticalSection
FreeEnvironmentStringsW
CreateThread
FlushFileBuffers
LoadLibraryExW
GetTickCount
SystemTimeToFileTime
WriteFile
GetModuleFileNameA
DeviceIoControl
CreateProcessW
GetCalendarInfoW
GetVersionExW
GetCommandLineA
SetWaitableTimer
SetEndOfFile
LocalFree
GetProcessHeap
GetStartupInfoA
GetVersionExA
GetEnvironmentStringsW
CreateFileA
FileTimeToLocalFileTime
SetHandleCount
CreateEventA
SetEvent
RaiseException
TerminateProcess
LeaveCriticalSection
IsValidCodePage
CompareStringA
GetStringTypeW
GetExitCodeProcess
GetFileAttributesW
GetSystemTimeAsFileTime
GetConsoleMode
HeapAlloc
GetCurrentThreadId
CreateFileW
CloseHandle
GetFileType
CompareStringW
GetTimeZoneInformation
InterlockedIncrement
WaitForSingleObject
GetLastError
GetDateFormatA
GetEnvironmentStrings
HeapFree
TlsGetValue
LoadLibraryA
MapViewOfFile
GetLocaleInfoA
GetCPInfo
HeapCreate
WriteConsoleW
GetSystemTime
GetProcAddress
WideCharToMultiByte
SetFileAttributesW
GetSystemDirectoryW
EnumResourceNamesA
RtlUnwind
UnmapViewOfFile
GetOEMCP
QueryPerformanceCounter
CreateWaitableTimerA
InitializeCriticalSection
SetFilePointer
WriteConsoleA
TlsAlloc
CopyFileW
DeleteFileW
MultiByteToWideChar
GetEnvironmentVariableW
HeapSize
FreeLibrary
IsDebuggerPresent
HeapDestroy
CreateFileMappingA
GetConsoleCP
TlsFree
LocalAlloc
LCMapStringA
FileTimeToSystemTime
CreateDirectoryW
DeleteCriticalSection
SetStdHandle
GetConsoleOutputCP
SetUnhandledExceptionFilter
GetCurrentProcess
GetTempPathW
SetLastError
InterlockedDecrement
GetACP
ExitProcess
CancelWaitableTimer
ResetEvent
UnhandledExceptionFilter
TlsSetValue
GetCurrentProcessId
HeapReAlloc
ReadFile
SetEnvironmentVariableA
VirtualFree
LCMapStringW
FreeEnvironmentStringsA
GetModuleHandleW
GetStringTypeA

ole32

CoGetMalloc
CoCreateInstance
CoTaskMemFree
CoUninitialize
CoSetProxyBlanket
CoInitializeSecurity
CoInitializeEx
CoQueryProxyBlanket
StringFromGUID2

mprapi

MprConfigServerConnect
MprConfigServerDisconnect
MprConfigGetFriendlyName

advapi32

LookupPrivilegeValueA
RegDeleteValueW
OpenSCManagerW
LookupPrivilegeDisplayNameA
CloseServiceHandle
IsValidAcl
AddAce
EqualSid
InitializeSecurityDescriptor
GetInheritanceSourceW
QueryServiceConfigW
IsValidSecurityDescriptor
UnlockServiceDatabase
RegEnumKeyExW
FreeInheritedFromArray
RegQueryValueExW
ControlService
SetNamedSecurityInfoW
LookupPrivilegeNameA
SetSecurityDescriptorDacl
LookupAccountSidW
GetNamedSecurityInfoW
GetTokenInformation
SetEntriesInAclA
RegSaveKeyW
RegCloseKey
StartServiceA
AllocateAndInitializeSid
CreateServiceW
QueryServiceLockStatusW
DeleteService
AdjustTokenPrivileges
RegDeleteKeyW
LockServiceDatabase
FreeSid
RegGetKeySecurity
RegOpenKeyExW
RegCreateKeyExW
RegSetValueExW
SetSecurityInfo
GetSecurityDescriptorControl
OpenServiceW
QueryServiceStatus
GetAce
GetSecurityInfo
InitializeAcl
SetEntriesInAclW
RegRestoreKeyW
ChangeServiceConfig2W
ChangeServiceConfigW
GetAclInformation
OpenProcessToken
EnumDependentServicesW
RegEnumValueW

iphlpapi

GetIpAddrTable

newdev

UpdateDriverForPlugAndPlayDevicesW

setupapi

SetupDiSetClassInstallParamsW
SetupCloseInfFile
SetupDiClassGuidsFromNameW
SetupGetLineTextA
SetupDiCreateDeviceInfoList
SetupCopyOEMInfW
SetupDiGetDeviceRegistryPropertyW
SetupDiGetClassDevsA
SetupDiDestroyDeviceInfoList
SetupDiBuildClassInfoList
SetupDiEnumDeviceInfo
CMP_WaitNoPendingInstallEvents
SetupDiGetClassDevsW
SetupDiDeleteDeviceInfo
SetupDiGetDeviceInstallParamsA
SetupDiClassNameFromGuidW
SetupDiCreateDeviceInfoA
SetupDiGetDeviceRegistryPropertyA
SetupDiGetDeviceInstanceIdW
SetupDiCallClassInstaller
SetupGetInfFileListA
SetupDiSetDeviceRegistryPropertyW
SetupOpenInfFileA
SetupDiGetClassDescriptionW
CM_Get_DevNode_Status

shell32

SHGetFolderPathW

user32

CreateWindowExW
EnumChildWindows
GetDlgItem
IsWindow
SendMessageA
DestroyWindow
GetWindowThreadProcessId

Sections

.text
Size: 90KB - Virtual size: 89KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: 69KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

32e7af7d4a558c84cf88da7fffcdc166

Headers

File Characteristics

Imports

rpcrt4

kernel32

ole32

mprapi

advapi32

iphlpapi

newdev

setupapi

shell32

user32

Sections

.text Size: 90KB - Virtual size: 89KB

.rdata Size: 6KB - Virtual size: 6KB

.bss Size: 69KB - Virtual size: 69KB

.rsrc Size: 1024B - Virtual size: 96KB

.text
Size: 90KB - Virtual size: 89KB

.rdata
Size: 6KB - Virtual size: 6KB

.bss
Size: 69KB - Virtual size: 69KB

.rsrc
Size: 1024B - Virtual size: 96KB