b8caebdcfecc513e859b20981caf7c83_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

b8caebdcfecc513e859b20981caf7c83_JaffaCakes118
Size

5.5MB
MD5

b8caebdcfecc513e859b20981caf7c83
SHA1

677f314671643c93ca3dc5adbbc04c927604c5b5
SHA256

0db2ab280d4a2aaf8b023182f4025ce0a66540f4d4bb85651e49c5b1bd946246
SHA512

4f4e7aeb3ef2efda585a9e105ff1b6e4c6c6cdacc989dbdfee13b0bdc50e6e7793c629c27aa435ce95df3d94d69643dca7af0cc97f47731ecc81c5a17a35bd10
SSDEEP

1536:gyxTrNFnToIfe8Sk6n1NpZFDMcbGCqZ4SyRSHGXMvTkB:gyxTrNtTBfYN7MdASyRQvTkB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b8caebdcfecc513e859b20981caf7c83_JaffaCakes118

Files

b8caebdcfecc513e859b20981caf7c83_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a466f7827d17fda84f851ba4770e4ea3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemDirectoryA
GetStartupInfoA
CreatePipe
SetThreadPriority
GetCurrentThread
lstrlenA
GetLastError
WinExec
CreateDirectoryA
GetWindowsDirectoryA
LoadLibraryA
ResumeThread
SetPriorityClass
lstrcatA
GetEnvironmentVariableA
GetShortPathNameA
ReadFile
CopyFileA
GetCurrentThreadId
GetModuleHandleA
GetProcAddress
CreateThread
TerminateThread
ExitProcess
CreateToolhelp32Snapshot
Process32First
lstrcmpiA
Process32Next
CloseHandle
GetComputerNameA
GlobalMemoryStatus
lstrcpyA
GetSystemInfo
WaitForSingleObject
CreateProcessA
GetTempPathA
GetVersionExA
GetCurrentProcess
UnmapViewOfFile
MapViewOfFile
LocalFree
GetModuleFileNameA
FreeLibrary
GetProcessHeap
HeapAlloc
GetSystemTime
GetTickCount
GetCurrentProcessId
lstrcpynA
Sleep
DeleteFileA

user32

mouse_event
SetCursorPos
keybd_event
GetSystemMetrics
SetThreadDesktop
OpenDesktopA
SetProcessWindowStation
OpenWindowStationA
GetThreadDesktop
GetProcessWindowStation
CloseDesktop
CloseWindowStation
wsprintfA

gdi32

CreateDCA
CreateCompatibleDC
CreateCompatibleBitmap
SelectObject
BitBlt
GetDIBits
DeleteDC
DeleteObject

advapi32

RegOpenKeyExA
SetSecurityInfo
OpenSCManagerA
OpenServiceA
DeleteService
RegQueryValueExA
RegCloseKey
GetSecurityInfo
AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken
RegSetValueExA
RegOpenKeyA
CloseServiceHandle
StartServiceA
CreateServiceA
SetServiceStatus
RegisterServiceCtrlHandlerA
StartServiceCtrlDispatcherA
SetEntriesInAclA

shell32

ShellExecuteA

msvcrt

_exit
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
??3@YAXPAX@Z
strchr
strstr
sprintf
rand
malloc
srand
time
fclose
fwrite
fopen
fread
fseek
strncat
??2@YAPAXI@Z
__CxxFrameHandler
_ftol
_CxxThrowException
fputs
fgets
??1type_info@@UAE@XZ
free
_XcptFilter

ws2_32

closesocket
connect
socket
htons
sendto
setsockopt
inet_addr
WSASocketA
gethostbyname
shutdown
WSAStartup
htonl
send
WSAIoctl
recv

winmm

timeGetTime

Sections

.data
Size: 57KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a466f7827d17fda84f851ba4770e4ea3

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

msvcrt

ws2_32

winmm

Sections

.data Size: 57KB - Virtual size: 56KB

.rsrc Size: 2KB - Virtual size: 1KB

.data
Size: 57KB - Virtual size: 56KB

.rsrc
Size: 2KB - Virtual size: 1KB