bb8133dec1d27dfee67f9c3d0d06419e_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

bb8133dec1d27dfee67f9c3d0d06419e_JaffaCakes118
Size

256KB
MD5

bb8133dec1d27dfee67f9c3d0d06419e
SHA1

d9e0b2cea071f82e7e768aee50c786e9d969c5b0
SHA256

076927808268e22c5338346596bf38a15fc7b724c87bd704bbff7cebaaa044bc
SHA512

55243a69fb1de58f701a405d9055fa97d3467ee5c301fbb265dc8d20335dd060ec8cc8aef76841a82c0dc66f8942d25ff7c63d786a20a040eec9cb10b3776510
SSDEEP

6144:It2yeY4oAAEFuhE28U1Qj4nQMj6QUV9fJJx2JK182prJaw0FM:It2yeYPF+uhQU04nQLZJl8Sg6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bb8133dec1d27dfee67f9c3d0d06419e_JaffaCakes118

Files

bb8133dec1d27dfee67f9c3d0d06419e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

63fd1e87a719c107458969f2ef179239

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

oleaut32

GetRecordInfoFromGuids
VariantTimeToSystemTime
SafeArrayGetLBound
SafeArrayDestroy
LoadRegTypeLi
SysAllocString
SafeArrayGetDim
VariantCopy
SafeArrayGetVartype
SystemTimeToVariantTime
SafeArrayUnlock
SafeArrayCreateVectorEx
SysAllocStringByteLen
SafeArrayGetElement
SafeArrayLock
VarBstrCmp
SysFreeString
SafeArrayGetUBound
VariantInit
SafeArrayRedim
SafeArrayCreate
VariantClear
SafeArrayUnaccessData
LoadTypeLi
VariantCopyInd
SysStringLen
SafeArrayAccessData
SafeArrayCopy
SysAllocStringLen
SysStringByteLen
VariantChangeType

kernel32

LockResource
lstrlenW
ReadFile
ExpandEnvironmentStringsW
WaitForSingleObject
HeapDestroy
EnterCriticalSection
UnhandledExceptionFilter
DeviceIoControl
LoadResource
RaiseException
GetLongPathNameW
FindClose
FormatMessageW
IsDebuggerPresent
MapViewOfFile
ResetEvent
SignalObjectAndWait
GlobalMemoryStatusEx
HeapFree
DeleteFileW
GetCurrentThreadId
SetUnhandledExceptionFilter
FindResourceW
CreateFileW
FileTimeToDosDateTime
CreateFileMappingW
GetSystemTime
SizeofResource
DeleteCriticalSection
LeaveCriticalSection
WriteFile
QueryDosDeviceW
ResumeThread
SetThreadLocale
CreateEventW
GetModuleHandleW
FileTimeToSystemTime
GetProcessHeap
SetEndOfFile
FindFirstFileW
CloseHandle
LocalFree
UnmapViewOfFile
CreateThread
GetSystemInfo
GetDriveTypeW
SetThreadPriority
GetACP
FindResourceExW
SetLastError
HeapAlloc
SetFilePointer
FreeLibrary
GetThreadLocale
HeapReAlloc
WaitForMultipleObjects
HeapSize
GetFileSize
GetSystemTimeAsFileTime
VirtualAllocEx

shlwapi

PathAppendW

shell32

SHGetFolderPathW

user32

wsprintfW
UnregisterClassA

ole32

OleRun
CoUninitialize
CoMarshalInterThreadInterfaceInStream
CLSIDFromProgID
CLSIDFromString
CoInitializeEx
CoCreateInstance
CoGetInterfaceAndReleaseStream
CoImpersonateClient
CoRevertToSelf

advapi32

LookupAccountSidW
MakeSelfRelativeSD
GetAclInformation
RegCreateKeyExW
EqualSid
GetSecurityDescriptorGroup
GetSidSubAuthority
GetSecurityDescriptorControl
GetTokenInformation
OpenProcessToken
GetSidLengthRequired
CopySid
MakeAbsoluteSD
GetLengthSid
RegQueryValueExW
InitializeSecurityDescriptor
InitializeAcl
OpenThreadToken
AddAce
GetSecurityDescriptorDacl
SetSecurityDescriptorOwner
DuplicateTokenEx
RevertToSelf
GetSecurityDescriptorSacl
ConvertStringSidToSidW
InitializeSid
SetThreadToken
RegCloseKey
IsValidSid
GetSecurityDescriptorOwner
SetSecurityDescriptorDacl
LookupPrivilegeValueW
RegNotifyChangeKeyValue
GetSecurityDescriptorLength
AdjustTokenPrivileges

userenv

UnloadUserProfile

esent

JetStopServiceInstance
JetCreateTableColumnIndex
JetRetrieveKey
JetGetTableInfo
JetGetLS
JetGetCursorInfo
JetOpenFile
JetPrepareUpdate
JetDetachDatabase
JetCreateDatabaseWithStreaming
JetGetTruncateLogInfoInstance
JetSetColumns
JetGetAttachInfoInstance
JetSetCurrentIndex3

scrrun

DllRegisterServer
DllGetClassObject
DllUnregisterServer
DllCanUnloadNow

Sections

.fmCma
Size: 1024B - Virtual size: 20KB

IMAGE_SCN_MEM_READ

.text
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.LQUrAC
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.SitA
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.hpcMJ
Size: 1024B - Virtual size: 732B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bVUGvzj
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ZsMGdz
Size: 512B - Virtual size: 197B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.NQnDuGc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 126KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 209KB - Virtual size: 209KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.mSUHsRG
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.UFHYF
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vmGaHYW
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.YQmo
Size: 1024B - Virtual size: 576B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

63fd1e87a719c107458969f2ef179239

Headers

File Characteristics

Imports

oleaut32

kernel32

shlwapi

shell32

user32

ole32

advapi32

userenv

esent

scrrun

Sections

.fmCma Size: 1024B - Virtual size: 20KB

.text Size: 19KB - Virtual size: 18KB

.LQUrAC Size: 1KB - Virtual size: 1KB

.SitA Size: 2KB - Virtual size: 2KB

.hpcMJ Size: 1024B - Virtual size: 732B

.bVUGvzj Size: 1KB - Virtual size: 1KB

.ZsMGdz Size: 512B - Virtual size: 197B

.NQnDuGc Size: 1KB - Virtual size: 1KB

.data Size: 7KB - Virtual size: 126KB

.rdata Size: 209KB - Virtual size: 209KB

.mSUHsRG Size: 3KB - Virtual size: 2KB

.UFHYF Size: 2KB - Virtual size: 2KB

.vmGaHYW Size: 1KB - Virtual size: 1KB

.rsrc Size: 2KB - Virtual size: 1KB

.YQmo Size: 1024B - Virtual size: 576B

.fmCma
Size: 1024B - Virtual size: 20KB

.text
Size: 19KB - Virtual size: 18KB

.LQUrAC
Size: 1KB - Virtual size: 1KB

.SitA
Size: 2KB - Virtual size: 2KB

.hpcMJ
Size: 1024B - Virtual size: 732B

.bVUGvzj
Size: 1KB - Virtual size: 1KB

.ZsMGdz
Size: 512B - Virtual size: 197B

.NQnDuGc
Size: 1KB - Virtual size: 1KB

.data
Size: 7KB - Virtual size: 126KB

.rdata
Size: 209KB - Virtual size: 209KB

.mSUHsRG
Size: 3KB - Virtual size: 2KB

.UFHYF
Size: 2KB - Virtual size: 2KB

.vmGaHYW
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 2KB - Virtual size: 1KB

.YQmo
Size: 1024B - Virtual size: 576B