b59e52555fe774fac432baa0fa596b7c_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

b59e52555fe774fac432baa0fa596b7c_JaffaCakes118
Size

84KB
MD5

b59e52555fe774fac432baa0fa596b7c
SHA1

e50a61a33f431b8d43bd57c00ea4cdcb68a7c681
SHA256

c98ed0e19a4c03cc3543d89bad616ee1b72b5839f794537d50b1a5891facf55a
SHA512

1c995879e5c3bd587ac6cb289b134a073a1d864a915a00404e5c2e38fec3a00b5cd9c872c01da592cecd7ac5200b3ec76dfdbfdd66b929c312cdb1df0564acbd
SSDEEP

1536:hZpAGkyP+KDHnDciYtrHlVE56FbjJAjZxI3eb4l/GQLMR/CQ+QS:hZeWn9Yt7l26Fa7Pb4l/GIQl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b59e52555fe774fac432baa0fa596b7c_JaffaCakes118

Files

b59e52555fe774fac432baa0fa596b7c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7e5d39c8e0b3a087afb9b2f2b9c21140

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

BackupRead
CloseHandle
CreateConsoleScreenBuffer
DisconnectNamedPipe
ExitProcess
FindFirstVolumeA
FindVolumeMountPointClose
GetACP
GetAtomNameA
GetCommandLineA
GetCurrentThread
GetDiskFreeSpaceW
GetFileSizeEx
GetModuleHandleA
GetModuleHandleW
GetOEMCP
GetProcessVersion
GetStartupInfoA
GetTickCount
GetVersionExA
GlobalGetAtomNameW
HeapAlloc
HeapCreate
IsBadWritePtr
LoadLibraryExA
MoveFileExA
ReadFileScatter
SetEnvironmentVariableA
SetEnvironmentVariableW
SetHandleInformation
SetLastError
SetTimeZoneInformation
WriteFile

user32

ShowWindow
SendMessageTimeoutA
ReleaseDC
OpenClipboard
MoveWindow
MessageBoxA
InflateRect
GetParent
GetMenuItemID
GetFocus
GetDoubleClickTime
FrameRect
DrawFrameControl
DrawEdge
DialogBoxParamA
DefWindowProcA
CreateDialogParamA
CheckMenuItem
BeginDeferWindowPos
OffsetRect

msi

MsiSummaryInfoSetPropertyW
MsiSummaryInfoPersist
MsiSourceListClearAllA
MsiRecordSetStreamW
MsiProvideComponentA
MsiProcessAdvertiseScriptW
MsiLocateComponentW
MsiGetShortcutTargetA
MsiGetFeatureUsageA
MsiEnumPatchesW
MsiEnumComponentQualifiersA
MsiEnumClientsW
MsiApplyPatchW
MsiAdvertiseProductExA
MsiVerifyPackageA

oleacc

GetStateTextA
AccessibleObjectFromEvent

oledlg

OleUIInsertObjectA
OleUIAddVerbMenuA
OleUICanConvertOrActivateAs
OleUIChangeIconA
OleUIConvertA

odbc32

SQLColAttributesA
SQLBindParam
PostODBCError
SQLColumnsA
SQLDisconnect
SQLDriverConnectA
SQLErrorA
SQLFreeConnect
SQLGetCursorNameA
SQLGetData
SQLGetDiagFieldW
SQLGetStmtAttrA
SQLMoreResults
SQLNativeSqlA
SQLPrimaryKeysA
SQLSetCursorNameA
SQLSetEnvAttr
SQLTablePrivilegesA

Sections

.text
Size: 53KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7e5d39c8e0b3a087afb9b2f2b9c21140

Headers

File Characteristics

Imports

kernel32

user32

msi

oleacc

oledlg

odbc32

Sections

.text Size: 53KB - Virtual size: 56KB

.data Size: 28KB - Virtual size: 28KB

.rsrc Size: 1024B - Virtual size: 4KB

.reloc Size: 1KB - Virtual size: 4KB

.text
Size: 53KB - Virtual size: 56KB

.data
Size: 28KB - Virtual size: 28KB

.rsrc
Size: 1024B - Virtual size: 4KB

.reloc
Size: 1KB - Virtual size: 4KB