b2cf655222893148f5dae3f9417fdb43_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

b2cf655222893148f5dae3f9417fdb43_JaffaCakes118
Size

96KB
MD5

b2cf655222893148f5dae3f9417fdb43
SHA1

5146ed27419d9dbb2a7da1a1832efb55056b66b3
SHA256

aff484e919931e10d78d85b7841c849a0ba3cb8292f34f22a171e2ba6d32eea0
SHA512

64f277997a82121a4adb8d8851da85ac0062450cc727f7b884eab85077d8d0dff5f13509dd92f52016f52f3854088d1222dad7cb510d7b7f177414053b92c990
SSDEEP

1536:IB1azpG+9mjpaUbVxD+MuqH3ieZgqtD0F5wYWcM0GguyrYKfqvJNcc3Ali:IB1azl0jwMAqD0F5zhF5YlvJNcc3Aw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b2cf655222893148f5dae3f9417fdb43_JaffaCakes118

Files

b2cf655222893148f5dae3f9417fdb43_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ee940f39ab66a6b7703d921f0c0f5dc5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetPropA
ReleaseDC
RegisterClassA
GetWindowLongA
GetPropA
GetDoubleClickTime
GetDlgItemTextA
GetDC
GetClientRect
GetCapture
FrameRect
ExitWindowsEx
EnumChildWindows
DrawEdge
CloseClipboard

netapi32

NetDfsManagerSendSiteInfo
NetLocalGroupSetInfo
NetReplExportDirEnum
NetShareDel
NetUserEnum

oleaut32

SysReAllocString
SysStringLen
SafeArrayDestroy
RevokeActiveObject
OleTranslateColor
OleLoadPicture
OleIconToCursor
GetErrorInfo

dbghelp

SymGetModuleBase
SymGetLineFromAddr64
SymEnumerateSymbolsW
FindDebugInfoFileEx

shlwapi

ColorHLSToRGB
PathAddExtensionA
PathFindFileNameW
PathIsUNCServerA
AssocQueryKeyA
ChrCmpIA

advapi32

CreateProcessAsUserW
ElfOpenEventLogA
LookupPrivilegeNameA
LsaClearAuditLog
RegUnLoadKeyW
SetFileSecurityA
SetPrivateObjectSecurity
SetSecurityDescriptorRMControl
SetServiceStatus
AddAuditAccessObjectAce

kernel32

WriteFileEx
SetUnhandledExceptionFilter
SetTapeParameters
SetEvent
HeapCreate
HeapAlloc
GetVolumeInformationA
GetVersionExW
GetVersionExA
GetStartupInfoA
GetModuleHandleA
GetCommandLineA
FoldStringA
FindVolumeMountPointClose
FindFirstVolumeW
CancelTimerQueueTimer
CloseHandle
EnumResourceNamesA
EnumSystemLanguageGroupsW
ExitProcess
AssignProcessToJobObject

Sections

.text
Size: 56KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ee940f39ab66a6b7703d921f0c0f5dc5

Headers

File Characteristics

Imports

user32

netapi32

oleaut32

dbghelp

shlwapi

advapi32

kernel32

Sections

.text Size: 56KB - Virtual size: 55KB

.data Size: 28KB - Virtual size: 27KB

.rsrc Size: 4KB - Virtual size: 3KB

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 56KB - Virtual size: 55KB

.data
Size: 28KB - Virtual size: 27KB

.rsrc
Size: 4KB - Virtual size: 3KB

.reloc
Size: 4KB - Virtual size: 3KB