bf7b61b7d5984c357907a111480602e8_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

bf7b61b7d5984c357907a111480602e8_JaffaCakes118
Size

80KB
MD5

bf7b61b7d5984c357907a111480602e8
SHA1

95d79d6f7da79b6487fb19431134ccb09fc027b8
SHA256

520a97331c488c176432b18191957390c3e4961af04fa14d8e39482764bade1c
SHA512

cce9cd58fcb907618f0289ceb4a63bf9ca8df5bb53a6fa559db68c31f8c05e786b5c862218fc49dc68b2a18d7ecf7d81d9c781a3876455f42420ae21e4443b14
SSDEEP

768:qIgxZk/RCEH4QJcWfL3n8z3vpPzXreencxkgbsb3JnPY4f54jKV+JVbZU:QRQJciIDvpLr/nkcr4GVubZU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bf7b61b7d5984c357907a111480602e8_JaffaCakes118

Files

bf7b61b7d5984c357907a111480602e8_JaffaCakes118
.exe .vbs windows:4 windows x86 arch:x86 polyglot

9bbfd76383eaacb3e4ff69fa8c26d224

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindClose
FindFirstFileA
GetSystemDirectoryA
MoveFileExA
DeleteFileA
ReadFile
WinExec
GetTempFileNameA
GetTempPathA
SetFilePointer
lstrcpynA
CreateDirectoryA
FindNextFileA
ReleaseMutex
WaitForSingleObject
lstrcmpiA
lstrcpyA
lstrcmpA
GetEnvironmentVariableA
lstrcatA
GetDiskFreeSpaceA
GetModuleHandleA
Sleep
MoveFileA
GetLocalTime
GetCurrentProcess
FormatMessageA
GetLastError
GetComputerNameA
SetCurrentDirectoryA
lstrlenA
VirtualFree
VirtualAlloc
FileTimeToDosDateTime
SetEndOfFile
DosDateTimeToFileTime
GetFileTime
SetFileTime
ExitProcess
SystemTimeToFileTime
CreateProcessA
GetWindowsDirectoryA
CreateMutexA
CreateSemaphoreA
CreateThread
SizeofResource
LockResource
LoadResource
FindResourceA
DeviceIoControl
HeapFree
HeapAlloc
GetProcessHeap
GetDriveTypeA
GetLogicalDrives
GetLogicalDriveStringsA
FileTimeToSystemTime
ReleaseSemaphore
OpenSemaphoreA
MultiByteToWideChar
SetFileAttributesW
CreateFileA
GetFileSize
CloseHandle
CreateFileMappingA
MapViewOfFile
WriteFile
UnmapViewOfFile
GetModuleFileNameA
CopyFileA
SetFileAttributesA
LoadLibraryA
GetSystemTime
GetProcAddress

user32

CharLowerBuffA
wsprintfA
DefWindowProcA
SetTimer
ShowWindow
PostQuitMessage
EndDialog
KillTimer
DialogBoxParamA

advapi32

InitializeAcl
AddAccessAllowedAce
SetSecurityDescriptorDacl
SetFileSecurityA
InitializeSecurityDescriptor
AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken
RegSaveKeyA
RegOpenKeyExA
RegRestoreKeyA
RegCloseKey
RegQueryValueExA
LookupAccountNameA

shell32

SHChangeNotify

ole32

CoInitialize
CoUninitialize

msvcrt

strrchr
_strcmpi
atol
isdigit
_except_handler3
memmove
strchr
wcslen
strncmp
__CxxFrameHandler
atoi
_strlwr
strncpy
_findfirst
_findclose
_findnext

ws2_32

gethostbyname
WSAStartup
WSACleanup
inet_addr

Sections

.data
Size: 49KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 30KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

9bbfd76383eaacb3e4ff69fa8c26d224

Headers

File Characteristics

Imports

kernel32

user32

advapi32

shell32

ole32

msvcrt

ws2_32

Sections

.data Size: 49KB - Virtual size: 48KB

.rsrc Size: 30KB - Virtual size: 49KB

.data
Size: 49KB - Virtual size: 48KB

.rsrc
Size: 30KB - Virtual size: 49KB