d6e600a7269a3169bd0baa2701ea823b_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

d6e600a7269a3169bd0baa2701ea823b_JaffaCakes118
Size

104KB
MD5

d6e600a7269a3169bd0baa2701ea823b
SHA1

3f79845b87b993b3607201a7cf095b040ce9fc34
SHA256

a1a365bfce65e9c0bf87e3f7999ede77463838d1940fa4d245bb1ec35ce59b93
SHA512

11a57799388bb5e8a9cd51a413d1fb9a47b8313d809726caa55964263290768492464e61d7d73052d32a27f4dc90b38cb97a4f1ea80cb8bee3f693a2f5f1eb3f
SSDEEP

1536:qnfvt80d1MReNlq0NmP30HlM3q5Adv1wiYnyid3YiUg61sY/nlRyE8If:qfFLY4pSWlM65kdwiYnNd5UgclRyo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d6e600a7269a3169bd0baa2701ea823b_JaffaCakes118

Files

d6e600a7269a3169bd0baa2701ea823b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ee940f39ab66a6b7703d921f0c0f5dc5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetPropA
ReleaseDC
RegisterClassA
GetWindowLongA
GetPropA
GetDoubleClickTime
GetDlgItemTextA
GetDC
GetClientRect
GetCapture
FrameRect
ExitWindowsEx
EnumChildWindows
DrawEdge
CloseClipboard

netapi32

NetDfsManagerSendSiteInfo
NetLocalGroupSetInfo
NetReplExportDirEnum
NetShareDel
NetUserEnum

oleaut32

SysReAllocString
SysStringLen
SafeArrayDestroy
RevokeActiveObject
OleTranslateColor
OleLoadPicture
OleIconToCursor
GetErrorInfo

dbghelp

SymGetModuleBase
SymGetLineFromAddr64
SymEnumerateSymbolsW
FindDebugInfoFileEx

shlwapi

ColorHLSToRGB
PathAddExtensionA
PathFindFileNameW
PathIsUNCServerA
AssocQueryKeyA
ChrCmpIA

advapi32

CreateProcessAsUserW
ElfOpenEventLogA
LookupPrivilegeNameA
LsaClearAuditLog
RegUnLoadKeyW
SetFileSecurityA
SetPrivateObjectSecurity
SetSecurityDescriptorRMControl
SetServiceStatus
AddAuditAccessObjectAce

kernel32

WriteFileEx
SetUnhandledExceptionFilter
SetTapeParameters
SetEvent
HeapCreate
HeapAlloc
GetVolumeInformationA
GetVersionExW
GetVersionExA
GetStartupInfoA
GetModuleHandleA
GetCommandLineA
FoldStringA
FindVolumeMountPointClose
FindFirstVolumeW
CancelTimerQueueTimer
CloseHandle
EnumResourceNamesA
EnumSystemLanguageGroupsW
ExitProcess
AssignProcessToJobObject

Sections

.text
Size: 64KB - Virtual size: 63KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ee940f39ab66a6b7703d921f0c0f5dc5

Headers

File Characteristics

Imports

user32

netapi32

oleaut32

dbghelp

shlwapi

advapi32

kernel32

Sections

.text Size: 64KB - Virtual size: 63KB

.data Size: 28KB - Virtual size: 27KB

.rsrc Size: 4KB - Virtual size: 3KB

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 64KB - Virtual size: 63KB

.data
Size: 28KB - Virtual size: 27KB

.rsrc
Size: 4KB - Virtual size: 3KB

.reloc
Size: 4KB - Virtual size: 3KB