d28d67b4397b7ce1508d10bf3054ffe5_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

d28d67b4397b7ce1508d10bf3054ffe5_JaffaCakes118
Size

100KB
MD5

d28d67b4397b7ce1508d10bf3054ffe5
SHA1

263f094da3f64e72ef8dc3d02be4fb33de1fdb96
SHA256

ba15081f01bdc87dbe07329445c2b885fa4f6b9f3a775f369563897505e2ab4e
SHA512

f891a3656a1f9de4fdafefa56c238f50e9b6df9c290469f4cdc804d0489031b390823e556542820954dc9612c2fffc64e269de3a84474f965169fa5081ee84e2
SSDEEP

1536:z6AXrMAazhFMGN+0gBS1gDYWz8ZGwpclj8XoQjgP:XMA8Mg438Zfclj8XoQj6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d28d67b4397b7ce1508d10bf3054ffe5_JaffaCakes118

Files

d28d67b4397b7ce1508d10bf3054ffe5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

55a7bdc15fe9778c4d5d22f2e34d37f8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegCloseKey
RegSetValueExA
RegQueryValueExA
RegCreateKeyExA
RegOpenKeyExA
SetSecurityInfo
SetEntriesInAclA
AdjustTokenPrivileges
LookupPrivilegeValueA
GetTokenInformation
OpenProcessToken
GetUserNameA
LookupAccountSidA
RegEnumKeyExA
RegEnumValueA
RegDeleteValueA

kernel32

CreateThread
GetTickCount
DeleteFileA
GetProcAddress
LoadLibraryA
CreateMutexA
Sleep
WaitForSingleObject
CloseHandle
OpenMutexA
GetSystemDefaultLangID
GetComputerNameA
GetVolumeInformationA
GetDriveTypeA
GetLogicalDriveStringsA
LocalFree
GetLastError
DuplicateHandle
GetCurrentProcess
lstrcmpiA
GetPriorityClass
GetFileAttributesA
CreateDirectoryA
FindClose
RemoveDirectoryA
CopyFileA
GetLocalTime
GetFileSize
SetFileTime
GetFileTime
GlobalFree
GlobalAlloc
MultiByteToWideChar
HeapFree
HeapAlloc
GetModuleFileNameA
GetModuleHandleA
CompareStringW
CompareStringA
SetEndOfFile
GetOEMCP
GetACP
GetCPInfo
CreateFileA
FlushFileBuffers
SetStdHandle
LCMapStringW
SetEnvironmentVariableA
LCMapStringA
GetStringTypeW
GetStringTypeA
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
WriteFile
SetFilePointer
ReadFile
IsBadWritePtr
HeapReAlloc
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetVersion
GetCommandLineA
GetStartupInfoA
TerminateProcess
ExitProcess
RtlUnwind
GetTimeZoneInformation
GetSystemTime
MoveFileA

user32

mouse_event
GetSystemMetrics
GetWindowTextA
SendMessageA
GetClassNameA
GetWindow
GetForegroundWindow
GetWindowRect

shell32

SHGetSpecialFolderPathA

ole32

CoCreateInstance
CoInitialize

wsock32

recv
gethostname
gethostbyname
getpeername
inet_addr
WSAGetLastError
WSAStartup
select
inet_ntoa
ioctlsocket
htons
socket
listen
bind
accept
WSACleanup
closesocket

mpr

WNetCloseEnum

shlwapi

SHDeleteKeyA
SHSetValueA
SHGetValueA

netapi32

NetApiBufferFree
NetGetDCName

Sections

.text
Size: 56KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

55a7bdc15fe9778c4d5d22f2e34d37f8

Headers

File Characteristics

Imports

advapi32

kernel32

user32

shell32

ole32

wsock32

mpr

shlwapi

netapi32

Sections

.text Size: 56KB - Virtual size: 52KB

.rdata Size: 8KB - Virtual size: 4KB

.data Size: 28KB - Virtual size: 35KB

.rsrc Size: 4KB - Virtual size: 3KB

.text
Size: 56KB - Virtual size: 52KB

.rdata
Size: 8KB - Virtual size: 4KB

.data
Size: 28KB - Virtual size: 35KB

.rsrc
Size: 4KB - Virtual size: 3KB