e1ec946510440797128f0ee5ffb777ed_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

e1ec946510440797128f0ee5ffb777ed_JaffaCakes118
Size

268KB
MD5

e1ec946510440797128f0ee5ffb777ed
SHA1

f659743954150383915c023df1e6c259615fcc52
SHA256

a195911e2d53fa2d1cb4dfc0f490cc382f03fdd92d1182886d9414c7e8874d48
SHA512

a645b0da99f6d0e18fcd841dc5cb015abaf6f286c3f9d29a2ca12e4aa54cde350cd3d817bfd7629fa35ef9f1c8bb6a821f8cb6f16c22c01076b224cf85d67e23
SSDEEP

6144:RRkn+alqMqDoV0L29KQWFte1RfUuSDe+ArH:RRg+allJ0LcKNyR3SM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e1ec946510440797128f0ee5ffb777ed_JaffaCakes118

Files

e1ec946510440797128f0ee5ffb777ed_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6557903e39eb0fff6caac64e75d141e1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

wininet

InternetCrackUrlA
InternetCanonicalizeUrlA

version

GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA

iphlpapi

GetAdaptersInfo

kernel32

GetACP
GetThreadLocale
RaiseException
CompareFileTime
WaitForSingleObject
GetModuleHandleA
lstrlenW
lstrlenA
FreeLibrary
MoveFileA
GetWindowsDirectoryA
CreateEventA
CopyFileExA
GetSystemDirectoryA
CreateDirectoryA
GetThreadPriority
GetCurrentThreadId
GetLocalTime
GetCurrentDirectoryA
CreateMutexA
lstrcpynA
GetShortPathNameA
lstrcmpiA
LocalFree
CopyFileA
FileTimeToSystemTime
RemoveDirectoryA
SystemTimeToFileTime
IsValidCodePage
IsBadCodePtr
IsValidLocale
GetUserDefaultLCID
SetUnhandledExceptionFilter
TlsAlloc
GetOEMCP
GetSystemInfo
GetProcAddress

user32

CharPrevA
PostMessageA
MessageBoxA
CharUpperA
GetSystemMetrics

advapi32

IsTextUnicode
ImpersonateLoggedOnUser
RevertToSelf
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
GetTokenInformation
DuplicateTokenEx
SetTokenInformation
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
RegOpenKeyExW
RegQueryValueExW
RegOpenKeyExA
RegQueryValueExA
RegCloseKey

ole32

CoUninitialize
CoInitialize
CoInitializeEx
CoCreateInstance

oleaut32

SysFreeString
VariantClear
SysAllocStringByteLen
SysAllocString

shlwapi

PathFileExistsA
PathRemoveFileSpecA

cryptui

CryptUIDlgSelectCA
CryptUIDlgViewContext
CryptUIWizQueryCertRequestNoDS
CryptUIDlgViewCertificateW
CryptUIGetViewSignaturesPagesW
CryptUIDlgSelectCertificateW

msident

DllCanUnloadNow

Sections

.text
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.Y
Size: 4KB - Virtual size: 173KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MoKn
Size: 2KB - Virtual size: 234KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 3KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.fFqpwT
Size: 512B - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.SD
Size: 3KB - Virtual size: 118KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.LdU
Size: 116KB - Virtual size: 119KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.FUMIG
Size: 1024B - Virtual size: 203KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.a
Size: 2KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.f
Size: 1024B - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 7KB - Virtual size: 222KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ANRgVD
Size: 97KB - Virtual size: 179KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bi
Size: 3KB - Virtual size: 75KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6557903e39eb0fff6caac64e75d141e1

Headers

File Characteristics

Imports

wininet

version

iphlpapi

kernel32

user32

advapi32

ole32

oleaut32

shlwapi

cryptui

msident

Sections

.text Size: 14KB - Virtual size: 14KB

.Y Size: 4KB - Virtual size: 173KB

.MoKn Size: 2KB - Virtual size: 234KB

.rdata Size: 3KB - Virtual size: 35KB

.fFqpwT Size: 512B - Virtual size: 27KB

.SD Size: 3KB - Virtual size: 118KB

.LdU Size: 116KB - Virtual size: 119KB

.FUMIG Size: 1024B - Virtual size: 203KB

.a Size: 2KB - Virtual size: 38KB

.f Size: 1024B - Virtual size: 61KB

.data Size: 7KB - Virtual size: 222KB

.ANRgVD Size: 97KB - Virtual size: 179KB

.bi Size: 3KB - Virtual size: 75KB

.rsrc Size: 10KB - Virtual size: 10KB

.text
Size: 14KB - Virtual size: 14KB

.Y
Size: 4KB - Virtual size: 173KB

.MoKn
Size: 2KB - Virtual size: 234KB

.rdata
Size: 3KB - Virtual size: 35KB

.fFqpwT
Size: 512B - Virtual size: 27KB

.SD
Size: 3KB - Virtual size: 118KB

.LdU
Size: 116KB - Virtual size: 119KB

.FUMIG
Size: 1024B - Virtual size: 203KB

.a
Size: 2KB - Virtual size: 38KB

.f
Size: 1024B - Virtual size: 61KB

.data
Size: 7KB - Virtual size: 222KB

.ANRgVD
Size: 97KB - Virtual size: 179KB

.bi
Size: 3KB - Virtual size: 75KB

.rsrc
Size: 10KB - Virtual size: 10KB