ab236c9fbea4a2278d790eb7e2de3417_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

ab236c9fbea4a2278d790eb7e2de3417_JaffaCakes118
Size

195KB
MD5

ab236c9fbea4a2278d790eb7e2de3417
SHA1

eda1120ed70fd11146c9dbec7b06f5303f5cb076
SHA256

5583a80b652ff9383c01c291b7c4b3b7094ee7d9d1117e36c91080859434f03d
SHA512

29bcb391a92f4ba1b1cc162aa0824668f178152036a4429d71fca2afb947dd91377592c95fc68180d1caf925d7aa2abe6a188d4d6770f8cfebae0c6ea9935223
SSDEEP

3072:hHRuHsgeK/gDti9kX8Jii1cWw5nOXqsnhdUvOAqqsSiI5RcGl:hHg5pIEkO1cWEnObPGdgM3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ab236c9fbea4a2278d790eb7e2de3417_JaffaCakes118

Files

ab236c9fbea4a2278d790eb7e2de3417_JaffaCakes118
.exe windows:5 windows x86 arch:x86

4eb46ed53edde4eabb1cfb949cc942ad

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

version

GetFileVersionInfoSizeA
VerQueryValueA
GetFileVersionInfoA

kernel32

CreateThread
Process32Next
TerminateProcess
OpenProcess
Process32First
CreateToolhelp32Snapshot
GetCurrentProcess
Module32First
CreateFileA
GetProcAddress
GetModuleHandleA
GetLastError
GetLocaleInfoW
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
WriteFile
CreateProcessA
lstrlenA
GetModuleFileNameA
CopyFileA
OutputDebugStringA
GetVersionExA
OpenEventA
SetEvent
CloseHandle
Sleep
MoveFileExA
GetTickCount
DeleteFileA
FlushFileBuffers
CompareStringA
CompareStringW
GetCurrentProcessId
UnhandledExceptionFilter
SetStdHandle
GetTimeZoneInformation
HeapSize
LoadLibraryA
InterlockedExchange
FreeLibrary
SetConsoleCtrlHandler
InitializeCriticalSectionAndSpinCount
GetConsoleMode
RtlUnwind
HeapFree
HeapAlloc
GetCommandLineA
GetStartupInfoA
SetEnvironmentVariableA
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
GetCurrentThread
LCMapStringA
WideCharToMultiByte
MultiByteToWideChar
LCMapStringW
VirtualQuery
HeapCreate
HeapDestroy
VirtualFree
DeleteCriticalSection
LeaveCriticalSection
FatalAppExitA
EnterCriticalSection
VirtualAlloc
HeapReAlloc
ExitProcess
GetStdHandle
RaiseException
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetStringTypeA
GetStringTypeW
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
SetFilePointer
GetConsoleCP

user32

FindWindowA
PostMessageA
wsprintfA

advapi32

ControlService
OpenSCManagerA
OpenServiceA
QueryServiceStatusEx
CloseServiceHandle
RegisterServiceCtrlHandlerExA
SetServiceStatus
CreateProcessAsUserA
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
StartServiceCtrlDispatcherA
RegSetValueExA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
GetUserNameA
StartServiceA

wininet

HttpSendRequestA
InternetSetOptionA
HttpOpenRequestA
InternetReadFile
HttpQueryInfoA
InternetCloseHandle
InternetConnectA
InternetOpenA

Sections

.text
Size: 160KB - Virtual size: 160KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4eb46ed53edde4eabb1cfb949cc942ad

Headers

DLL Characteristics

File Characteristics

Imports

version

kernel32

user32

advapi32

wininet

Sections

.text Size: 160KB - Virtual size: 160KB

.rdata Size: 17KB - Virtual size: 17KB

.data Size: 8KB - Virtual size: 15KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 7KB - Virtual size: 6KB

.text
Size: 160KB - Virtual size: 160KB

.rdata
Size: 17KB - Virtual size: 17KB

.data
Size: 8KB - Virtual size: 15KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 7KB - Virtual size: 6KB