df547aa899a5faea656df51a781b4a14_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

df547aa899a5faea656df51a781b4a14_JaffaCakes118
Size

300KB
MD5

df547aa899a5faea656df51a781b4a14
SHA1

a59a2c36f95123cf903f050e54c5fd77a331c417
SHA256

25d766f9fe914c7520fb7262cc431c13259c11b2506f940c3c4d428189b16aa0
SHA512

011ccc4962696d4f1e7947e2e94809d0b35dddba917f966a44dbc50bf42617e66fbd61696f7dc806755618fc261cc43aed1f0251c9ce3d5c6ef1ef499cc8d8da
SSDEEP

6144:TO9RExekFKuWLuyMzqbIgJhK8fJ8z0TcEvF:TD19gzn5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
df547aa899a5faea656df51a781b4a14_JaffaCakes118

Files

df547aa899a5faea656df51a781b4a14_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7054b89043b977910bc0ab8d7e588f6c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileW
MultiByteToWideChar
lstrlenW
GetLastError
EnterCriticalSection
LockResource
DeleteCriticalSection
CloseHandle
LocalFree
GetFileSize
SetErrorMode
CreateProcessW
GetVolumeInformationA
CreateProcessA
ReadFile
GetSystemDirectoryA
GetACP
LeaveCriticalSection
GetModuleFileNameA
Process32NextW
CreateToolhelp32Snapshot
GetFileTime
GetVersionExA
GetWindowsDirectoryW
GetTempPathA
SetEvent
TerminateThread
GetExitCodeThread
CreateEventW
CreateThread
GetModuleFileNameW
WaitForMultipleObjects
SetFilePointer
FlushFileBuffers
GetConsoleMode
FormatMessageW
SizeofResource
Sleep
WideCharToMultiByte
InitializeCriticalSection
WriteFile
GetProcessHeap
GetTickCount
WaitForSingleObject
HeapFree
HeapAlloc
LoadResource
FindResourceW
FindResourceExW
lstrlenA
Process32FirstW
HeapReAlloc
SetEndOfFile
SetEnvironmentVariableW
SetEnvironmentVariableA
CompareStringW
CompareStringA
GetConsoleCP
SetStdHandle
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
CreateFileA
GetExitCodeProcess
GetCurrentProcessId
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
LoadLibraryA
InterlockedExchange
GetLocaleInfoA
GetThreadLocale
RaiseException
HeapDestroy
HeapSize
InterlockedIncrement
InterlockedDecrement
VirtualProtect
VirtualAlloc
GetProcAddress
GetModuleHandleA
GetSystemInfo
VirtualQuery
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetSystemTimeAsFileTime
DeleteFileW
GetLocalTime
ExitProcess
GetCommandLineA
GetStartupInfoA
RtlUnwind
GetCPInfo
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetOEMCP
IsValidCodePage
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
HeapCreate
VirtualFree
GetStdHandle
GetFileAttributesW
SetHandleCount
GetFileType

user32

GetKeyboardState
GetActiveWindow
UnregisterClassA

advapi32

QueryServiceStatusEx
StartServiceW
ChangeServiceConfig2W
OpenSCManagerW
CloseServiceHandle
CreateServiceW
RegisterServiceCtrlHandlerW
SetServiceStatus
RegSetValueExW
RegCloseKey
RegOpenKeyExW
RegQueryValueExW
RegCreateKeyExW
StartServiceCtrlDispatcherW

ole32

CLSIDFromProgID
CoInitialize
CoUninitialize
CoCreateInstance
StringFromCLSID

ws2_32

WSACloseEvent
WSASetEvent
WSAStartup
getaddrinfo
WSARecv
WSASocketW
WSASend
WSAGetLastError
WSAEnumNetworkEvents
WSAEventSelect
WSACleanup
WSAGetOverlappedResult
freeaddrinfo
WSACreateEvent
WSASetLastError
closesocket
WSAResetEvent
WSAConnect

Sections

.text
Size: 248KB - Virtual size: 246KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 36KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7054b89043b977910bc0ab8d7e588f6c

Headers

File Characteristics

Imports

kernel32

user32

advapi32

ole32

ws2_32

Sections

.text Size: 248KB - Virtual size: 246KB

.rdata Size: 36KB - Virtual size: 32KB

.data Size: 8KB - Virtual size: 15KB

.rsrc Size: 4KB - Virtual size: 1KB

.text
Size: 248KB - Virtual size: 246KB

.rdata
Size: 36KB - Virtual size: 32KB

.data
Size: 8KB - Virtual size: 15KB

.rsrc
Size: 4KB - Virtual size: 1KB