ab4b6ce440783408a636a8afc8064f8d_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

ab4b6ce440783408a636a8afc8064f8d_JaffaCakes118
Size

83KB
MD5

ab4b6ce440783408a636a8afc8064f8d
SHA1

1f251492bd55e7f363c97e07adcd2f9345f21f71
SHA256

bd091f516a0cbac1b90173d5ed0b6f9cca3af764da8134736b5ff3f4984eab26
SHA512

93c2632a9eea72a4276a28e940011ae0c10e0202d12f9550576648c7b89692895cd868abaf86b078f905e28751c107fe8419b5f4b4b1905ab0ba13be0ff94944
SSDEEP

768:exPY4FJJZYEF8888A+ADhfE2FMCFLvaSy9kQYq+oQMXiLeYUwKrPrOzJNso:aVNVK+AdfE2FMCtvalbYq+oOUDrrOzj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ab4b6ce440783408a636a8afc8064f8d_JaffaCakes118

Files

ab4b6ce440783408a636a8afc8064f8d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8128e4c3e398ab4c4083211b37c9157e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

GetLengthSid
OpenProcessToken
CryptGenRandom
AllocateAndInitializeSid
InitiateSystemShutdownA
InitializeSecurityDescriptor
InitializeAcl
SetSecurityDescriptorDacl
AddAccessAllowedAce
CryptAcquireContextA
CryptReleaseContext
GetTokenInformation

msvcrt

strchr
sprintf

kernel32

GetUserDefaultUILanguage
GetProcessHeap
GetDriveTypeA
GetSystemTimeAsFileTime
CreateThread
RemoveDirectoryA
CreateProcessA
ExpandEnvironmentStringsA
CreateEventA
GetModuleFileNameA
GetSystemTime
GetCurrentThreadId
FreeLibrary
SetEvent
LeaveCriticalSection
GetCurrentProcessId
HeapFree
DeleteCriticalSection
GetThreadPriority
MoveFileExA
WriteFile
GetFileAttributesA
GetCommandLineA
GetDiskFreeSpaceA
ExitProcess
LocalFileTimeToFileTime
SetErrorMode
CopyFileA
SetFileAttributesA
GetProcAddress
SetFileTime
CreateEventW
CreateDirectoryA
QueryDosDeviceA
CloseHandle
OpenEventA
QueryPerformanceCounter
DosDateTimeToFileTime
WaitForMultipleObjects
SystemTimeToFileTime
GetExitCodeProcess
GetFileSize
SetEndOfFile
GetSystemDirectoryA
DeviceIoControl
CreateFileA
SetFilePointer
DeleteFileA
TerminateProcess
FindNextFileA
SetUnhandledExceptionFilter
SleepEx
LoadLibraryA
GetModuleHandleA
GetVersionExA
WaitForSingleObject
EnterCriticalSection
GetTickCount
GetCurrentDirectoryA
HeapAlloc
GetCurrentProcess
SetLastError
ReadFile
FindClose
Sleep
FindFirstFileA
MoveFileA
WideCharToMultiByte

user32

ShowWindow
SendDlgItemMessageA
SetParent
SendMessageA
LoadStringA
DialogBoxParamA
EndDialog
MessageBoxA

shell32

SHGetPathFromIDListA
SHBrowseForFolderA

ntdll

NtOpenProcessToken
NtAdjustPrivilegesToken
NtShutdownSystem
NtClose

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 5KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.etext
Size: 67KB - Virtual size: 95KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

ypilalc
Size: - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

dxhehld
Size: - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

usbgusw
Size: - Virtual size: 6KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

8128e4c3e398ab4c4083211b37c9157e

Headers

File Characteristics

Imports

advapi32

msvcrt

kernel32

user32

shell32

ntdll

Sections

.text Size: 7KB - Virtual size: 7KB

.data Size: 5KB - Virtual size: 9KB

.rsrc Size: 2KB - Virtual size: 1KB

.etext Size: 67KB - Virtual size: 95KB

ypilalc Size: - Virtual size: 32KB

dxhehld Size: - Virtual size: 32KB

usbgusw Size: - Virtual size: 6KB

.text
Size: 7KB - Virtual size: 7KB

.data
Size: 5KB - Virtual size: 9KB

.rsrc
Size: 2KB - Virtual size: 1KB

.etext
Size: 67KB - Virtual size: 95KB

ypilalc
Size: - Virtual size: 32KB

dxhehld
Size: - Virtual size: 32KB

usbgusw
Size: - Virtual size: 6KB