d72af93acb81b95e6c6dd97d10ffd02c_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

d72af93acb81b95e6c6dd97d10ffd02c_JaffaCakes118
Size

1.8MB
MD5

d72af93acb81b95e6c6dd97d10ffd02c
SHA1

16b9d63a5b562d6395fb0d2f126e867884148d25
SHA256

3cdfca272b955cf02348003284c00433e42306b6ab36ec6a3193695d4d5d9937
SHA512

5df45c3dcf46f563a244af483b9a3e7c4967158a6ee3d0f78f5b0cd45cbf5a24b710dfd05dbb75f3c78d208f6874f1562d4ae0cdd94c20ffc154e597c77f97a8
SSDEEP

49152:ulCnlQH/FiDWa98KbyfIZWszB7+Rdbo/cCoF:rwADW4XtWszB7+T

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d72af93acb81b95e6c6dd97d10ffd02c_JaffaCakes118

Files

d72af93acb81b95e6c6dd97d10ffd02c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

73e32275a246f12d525b103b62ace611

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemDirectoryA
GetModuleHandleA
TerminateProcess
GetExitCodeProcess
SetEnvironmentVariableA
LoadLibraryExA
RaiseException
RtlUnwind
GetCommandLineA
HeapFree
HeapAlloc
GetProcessHeap
GetStartupInfoA
GetSystemTimeAsFileTime
FileTimeToSystemTime
FileTimeToLocalFileTime
GetDriveTypeA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
MultiByteToWideChar
HeapReAlloc
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
GetCurrentThread
ExitProcess
WriteFile
GetStdHandle
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
CloseHandle
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetFullPathNameA
GetCurrentDirectoryA
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
GetConsoleCP
GetConsoleMode
FlushFileBuffers
HeapSize
SetFilePointer
ReadFile
GetCPInfo
GetACP
GetSystemInfo
LCMapStringA
LCMapStringW
GetTimeZoneInformation
SetConsoleCtrlHandler
InitializeCriticalSection
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetStringTypeA
GetStringTypeW
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
GetLocaleInfoW
CompareStringA
CompareStringW
SetEndOfFile
GetVersion
GlobalMemoryStatus
CreateProcessA
lstrcpyA
GetCurrentProcess
SetPriorityClass
GetComputerNameW
GetComputerNameA
Sleep
WideCharToMultiByte
MoveFileA
FindFirstFileA
FindNextFileA
FindClose
DeleteFileA
SetFileAttributesA
GetVersionExA
LocalAlloc
LocalFree
lstrcmpiA
LoadLibraryA
GetProcAddress
FlushConsoleInputBuffer
CreateFileW
GetFullPathNameW
PeekNamedPipe
GetFileInformationByHandle
CreateThread
ResumeThread
ExitThread
FindFirstFileW
GetDriveTypeW
CreateDirectoryA
RemoveDirectoryA
SystemTimeToFileTime
CreateFileA
GetFileTime
CompareFileTime
OpenSemaphoreA
GetOEMCP
FreeLibrary
GetLocaleInfoA
GetCurrentProcessId
GetCurrentThreadId
GetLastError
WaitForSingleObject
ReleaseMutex
CreateMutexA
GetModuleFileNameA
lstrlenA
InterlockedExchange
ReleaseSemaphore
ReadConsoleInputA
SetEnvironmentVariableW
GetFileAttributesA
SetVolumeLabelA
lstrcpynA
InterlockedCompareExchange
DuplicateHandle
GetWindowsDirectoryA
HeapDestroy
SetErrorMode
DosDateTimeToFileTime
SetConsoleMode
GetConsoleScreenBufferInfo
GetVolumeInformationA
GlobalFree
OpenProcess
GetShortPathNameA
SetFileTime
GetLocalTime
LocalFileTimeToFileTime
FormatMessageW

shlwapi

SHDeleteKeyA

mpr

WNetAddConnection2A
WNetCancelConnection2A

wsock32

getservbyname
htonl
gethostname
ntohs
__WSAFDIsSet
gethostbyname
getsockname
ntohl
socket
htons
send
connect
WSASetLastError
getsockopt
inet_addr
select
inet_ntoa
shutdown
WSAGetLastError
recv
closesocket
WSAStartup
gethostbyaddr
WSACleanup
getservbyport
ioctlsocket

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA

comctl32

InitCommonControlsEx

user32

DefWindowProcA
GetSystemMetrics
wsprintfA
FindWindowA
SendMessageA
CloseWindowStation
MessageBoxA
GetUserObjectInformationW
GetClassInfoExA
RegisterClassExA
CreateWindowExA
CreateDialogParamA
EnableWindow
ShowWindow
CheckRadioButton
BringWindowToTop
GetMessageA
IsDlgButtonChecked
TranslateMessage
DispatchMessageA
OemToCharA
CharToOemA
ExitWindowsEx
SetUserObjectSecurity
GetUserObjectSecurity
CloseDesktop
OpenDesktopA
GetDlgItemTextA
GetDesktopWindow
GetWindowRect
CopyRect
OffsetRect
SetWindowPos
SetTimer
KillTimer
EndDialog
SetDlgItemTextA
GetDlgItem
EnumWindowStationsA
GetProcessWindowStation
OpenWindowStationA
SetProcessWindowStation

advapi32

OpenServiceA
DeleteService
CreateServiceA
OpenSCManagerA
QueryServiceStatus
RegDeleteKeyA
CreateProcessAsUserA
StartServiceA
ControlService
DeregisterEventSource
ReportEventA
CloseServiceHandle
GetSecurityDescriptorLength
DuplicateTokenEx
AddAccessAllowedAce
GetAclInformation
InitializeAcl
GetAce
AddAce
GetTokenInformation
GetLengthSid
CopySid
AllocateAndInitializeSid
RegEnumKeyExA
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
RegDeleteValueA
RegCreateKeyExA
RegSetValueExA
RegQueryValueExA
RegConnectRegistryA
RegOpenKeyA
RegCloseKey
RegOpenKeyExA
GetUserNameA
GetSecurityDescriptorGroup
IsValidSid
GetSecurityDescriptorOwner
GetSecurityDescriptorSacl
IsValidAcl
GetSecurityDescriptorDacl
IsValidSecurityDescriptor
SetKernelObjectSecurity
GetKernelObjectSecurity
AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken
GetSecurityDescriptorControl
RevertToSelf
ImpersonateLoggedOnUser
LogonUserA
FreeSid
LookupAccountSidA
RegisterEventSourceA

ole32

CoInitialize

netapi32

Netbios

Sections

.text
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 352KB - Virtual size: 348KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 64KB - Virtual size: 449KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

73e32275a246f12d525b103b62ace611

Headers

File Characteristics

Imports

kernel32

shlwapi

mpr

wsock32

version

comctl32

user32

advapi32

ole32

netapi32

Sections

.text Size: 1.4MB - Virtual size: 1.4MB

.rdata Size: 352KB - Virtual size: 348KB

.data Size: 64KB - Virtual size: 449KB

.rsrc Size: 4KB - Virtual size: 3KB

.text
Size: 1.4MB - Virtual size: 1.4MB

.rdata
Size: 352KB - Virtual size: 348KB

.data
Size: 64KB - Virtual size: 449KB

.rsrc
Size: 4KB - Virtual size: 3KB