e26be32fb9f7e9cccde5b937e9927702_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

e26be32fb9f7e9cccde5b937e9927702_JaffaCakes118
Size

155KB
MD5

e26be32fb9f7e9cccde5b937e9927702
SHA1

6dcec1d0ca6d2723ee5022937c16b405f28efd81
SHA256

091a8c278f53fc90e4a5f1ef3ef62fe43a9e0ef38b46044d5786b6f337793fd4
SHA512

01e17afcdc8cfebbb38f08f2ee050dff0ec3e5364fae7091878f4c8b323ab91e7c88164c60b0412c5ac9032f3612fa2c9260d0ee1e05890d9a5f78e751880341
SSDEEP

3072:YFyMDzxJ0zfObz94+YLfoT3fLuXJBnBvIDuclzZFL/ezBFMnXRNSVz:YIMfLNz94/joTPYvIDucVPL/WMnXRNS5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e26be32fb9f7e9cccde5b937e9927702_JaffaCakes118

Files

e26be32fb9f7e9cccde5b937e9927702_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a59ef97c2bc579af040f4b7cc36cb891

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentProcess
GetModuleHandleA
ExitThread
SetThreadPriority
GetCurrentThread
GetCurrentProcessId
ExitProcess
CreateMutexA
GetDriveTypeA
GetLogicalDriveStringsA
FindClose
FindNextFileA
FindFirstFileA
HeapReAlloc
VirtualAlloc
VirtualFree
GetFileAttributesA
MoveFileA
LoadLibraryA
GetProcAddress
FreeLibrary
GetModuleFileNameA
TerminateThread
CreateThread
lstrcmpiA
GetTickCount
GetLastError
GetFileSize
CloseHandle
RaiseException
GetLocalTime
lstrcpynA
GetSystemDirectoryA
CreateDirectoryA
lstrcmpA
GetComputerNameA
GetProcessTimes
CreateProcessA
GetVersionExA
GetTempFileNameA
GetTempPathA
WinExec
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
GetExitCodeThread
InitializeCriticalSection
SystemTimeToFileTime
FileTimeToSystemTime
FileTimeToLocalFileTime
CreateEventA
SetEvent
WaitForSingleObject
RtlUnwind
MultiByteToWideChar
LCMapStringW
LCMapStringA
WideCharToMultiByte
HeapAlloc
HeapFree
DeleteFileA
GetSystemTime
ReadFile
lstrlenA
GlobalAlloc
SetFilePointer
WriteFile
GlobalFree
CreateFileA
Sleep
lstrcpyA
lstrcatA

user32

CharLowerA
wvsprintfA
wsprintfA

advapi32

RegCreateKeyA
RegOpenKeyExA
GetUserNameA
RegQueryValueExA
CloseEventLog
ReadEventLogA
OpenEventLogA
RegDeleteKeyA
RegSetValueExA
RegEnumValueA
RegDeleteValueA
RegCloseKey
InitializeAcl
IsValidAcl
ControlService
ChangeServiceConfigA
OpenSCManagerA
OpenServiceA
DeleteService
CloseServiceHandle

ole32

CoInitialize
CoUninitialize
CoCreateGuid
StringFromCLSID
CoCreateInstance
CoInitializeSecurity

oleaut32

VariantInit
VariantClear

ws2_32

gethostbyname
WSACleanup
gethostname
inet_ntoa
htons
connect
recv
getpeername
send
setsockopt
accept
socket
closesocket
select
ioctlsocket
shutdown
WSAGetLastError
bind
listen
WSAStartup

Sections

.text
Size: 113KB - Virtual size: 112KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 41KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

a59ef97c2bc579af040f4b7cc36cb891

Headers

File Characteristics

Imports

kernel32

user32

advapi32

ole32

oleaut32

ws2_32

Sections

.text Size: 113KB - Virtual size: 112KB

.data Size: 41KB - Virtual size: 59KB

.text
Size: 113KB - Virtual size: 112KB

.data
Size: 41KB - Virtual size: 59KB