aacafb37e82716316348bc915eded882_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

aacafb37e82716316348bc915eded882_JaffaCakes118
Size

434KB
MD5

aacafb37e82716316348bc915eded882
SHA1

a379986d7e0659ce9304b9ea6dd352dfc7a55147
SHA256

f5f52affdf8b9dc042bc5886ea985af021d6db90199478d38129596f3b76688b
SHA512

654b974e9fcabda96893405c7e4bd06974cb9d0d7855c981ffc1fd9a223bd599f68f71e3a7fcf518d1f8238cd52aa09fac2bcb9f29e30bacd1c5b616445c7e80
SSDEEP

12288:0KVy1W0rSJEGg5Lmw62LGV2ou19dat26KrZ:0KV+W0rSJzgpmwxG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aacafb37e82716316348bc915eded882_JaffaCakes118

Files

aacafb37e82716316348bc915eded882_JaffaCakes118
.exe windows:5 windows x86 arch:x86

243c7559c3a8a96eeb90e63782356283

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_adjust_fdiv
malloc
_initterm
free
_except_handler3
wcscpy

rpcrt4

RpcStringFreeW
RpcStringBindingParseW
RpcBindingToStringBindingW
RpcServerUnregisterIf
RpcServerRegisterIfEx
RpcServerUseProtseqEpW
RpcImpersonateClient
RpcRevertToSelfEx
NdrServerCall2

user32

GetDlgItem
SetWindowTextW
EndDialog
SetWindowLongW
MessageBoxW
LoadStringW
PeekMessageW
SetCursor
LoadCursorW
GetDlgItemTextW
GetWindowLongW
DialogBoxParamW
wsprintfW

kernel32

CompareStringW
PulseEvent
ResetEvent
LocalSize
SetEvent
UnregisterWaitEx
RegisterWaitForSingleObject
CreateEventA
SetErrorMode
QueryPerformanceCounter
GetCurrentThreadId
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetVersionExA
CreateFileW
SearchPathW
OpenProcess
GetCurrentProcess
DuplicateHandle
GetTickCount
InterlockedIncrement
LoadLibraryW
GetProcAddress
FreeLibrary
ReadProcessMemory
SetLastError
LocalReAlloc
GetCurrentThread
CloseHandle
GetLastError
LocalAlloc
LocalFree
lstrlenW
GetCurrentProcessId

advapi32

CopySid
IsValidSid
GetSidIdentifierAuthority
ImpersonateSelf
RegisterServiceCtrlHandlerW
InitializeSid
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
SetServiceStatus
RegisterEventSourceW
ReportEventW
DeregisterEventSource
LookupAccountSidW
RevertToSelf
LogonUserW
SetThreadToken
OpenThreadToken
EqualSid
GetLengthSid
GetTokenInformation
AddAccessAllowedAce
AllocateAndInitializeSid
GetSidSubAuthorityCount
EqualPrefixSid
GetSidSubAuthority
FreeSid
InitializeAcl

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 940B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 2KB - Virtual size: 21B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.iq
Size: 124KB - Virtual size: 122KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.oooa
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.obb
Size: 124KB - Virtual size: 122KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.sef
Size: 124KB - Virtual size: 122KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.qwqw
Size: 2KB - Virtual size: 537B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sdsd
Size: 2KB - Virtual size: 103B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xczxc
Size: 2KB - Virtual size: 200B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.asqea
Size: 2KB - Virtual size: 200B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.asqeax
Size: 2KB - Virtual size: 200B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.oapa
Size: 2KB - Virtual size: 82B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gjdk
Size: 2KB - Virtual size: 120B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nbmv
Size: 2KB - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 2KB - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 18KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 262B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

243c7559c3a8a96eeb90e63782356283

Headers

DLL Characteristics

File Characteristics

Imports

msvcrt

rpcrt4

user32

kernel32

advapi32

Sections

.text Size: 8KB - Virtual size: 7KB

.rdata Size: 6KB - Virtual size: 4KB

.data Size: 2KB - Virtual size: 940B

.tls Size: 2KB - Virtual size: 21B

.iq Size: 124KB - Virtual size: 122KB

.oooa Size: 4KB - Virtual size: 2KB

.obb Size: 124KB - Virtual size: 122KB

.sef Size: 124KB - Virtual size: 122KB

.qwqw Size: 2KB - Virtual size: 537B

.sdsd Size: 2KB - Virtual size: 103B

.xczxc Size: 2KB - Virtual size: 200B

.asqea Size: 2KB - Virtual size: 200B

.asqeax Size: 2KB - Virtual size: 200B

.oapa Size: 2KB - Virtual size: 82B

.gjdk Size: 2KB - Virtual size: 120B

.nbmv Size: 2KB - Virtual size: 160B

.CRT Size: 2KB - Virtual size: 8B

.rsrc Size: 18KB - Virtual size: 16KB

.reloc Size: 2KB - Virtual size: 262B

.text
Size: 8KB - Virtual size: 7KB

.rdata
Size: 6KB - Virtual size: 4KB

.data
Size: 2KB - Virtual size: 940B

.tls
Size: 2KB - Virtual size: 21B

.iq
Size: 124KB - Virtual size: 122KB

.oooa
Size: 4KB - Virtual size: 2KB

.obb
Size: 124KB - Virtual size: 122KB

.sef
Size: 124KB - Virtual size: 122KB

.qwqw
Size: 2KB - Virtual size: 537B

.sdsd
Size: 2KB - Virtual size: 103B

.xczxc
Size: 2KB - Virtual size: 200B

.asqea
Size: 2KB - Virtual size: 200B

.asqeax
Size: 2KB - Virtual size: 200B

.oapa
Size: 2KB - Virtual size: 82B

.gjdk
Size: 2KB - Virtual size: 120B

.nbmv
Size: 2KB - Virtual size: 160B

.CRT
Size: 2KB - Virtual size: 8B

.rsrc
Size: 18KB - Virtual size: 16KB

.reloc
Size: 2KB - Virtual size: 262B