ef83d20e33d39756561fae2c04b02e69_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

ef83d20e33d39756561fae2c04b02e69_JaffaCakes118
Size

76KB
MD5

ef83d20e33d39756561fae2c04b02e69
SHA1

607f06c08317e1b97525d714007052dc1e1f3b25
SHA256

01bee625c5eee563e856ada7a7d86d40c949927200a6d4a804dd9114b4fabe01
SHA512

b5809ac34b163cd316ea47e2c9e25ec840656e15f6b19f581439a55b78b1e38e5faa68c033eb9c5184377be4028e40b773ba0bc42d373da17b75dd6af8c9e4b0
SSDEEP

768:qX6bK4h4ld2lNLxPuSD4BRwDdzu1A6iVkS5D7RmFppEdeFbuV/lA5/E7r0HNkMqB:pK4hnPv0BR31Ar5anNI/lYEaNELb5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ef83d20e33d39756561fae2c04b02e69_JaffaCakes118

Files

ef83d20e33d39756561fae2c04b02e69_JaffaCakes118
.exe windows:4 windows x86 arch:x86

fbb6750fb8ae781418ba1e81cae62a15

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

DestroyPrivateObjectSecurity
CreatePrivateObjectSecurity
OpenProcessToken
ConvertStringSidToSidW
SetSecurityDescriptorDacl
AddAccessAllowedAce
AddAccessDeniedAce
InitializeAcl
GetLengthSid
GetTokenInformation
OpenThreadToken
InitializeSecurityDescriptor
AccessCheck
RevertToSelf
ImpersonateNamedPipeClient
ConvertStringSecurityDescriptorToSecurityDescriptorW

kernel32

GetCurrentProcessId
GetCurrentThreadId
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
Sleep
ConnectNamedPipe
DisconnectNamedPipe
GetTickCount
CreateEventW
CreateNamedPipeW
CreateNamedPipeA
GetCurrentThread
WaitForMultipleObjects
GetCurrentProcess
GetLastError
LocalFree
InitializeCriticalSection
LoadLibraryA
GetProcAddress

userenv

RefreshPolicy
GetDefaultUserProfileDirectoryA
DllGetClassObject
FreeGPOListW
ForceSyncFgPolicy
LoadUserProfileA

icm32

CMGetNamedProfileInfo
CMTranslateRGB
CMCreateTransformExtW
CMTranslateRGBsExt

Sections

.icode
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.JvOL
Size: 2KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.MtnP
Size: 2KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 10KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.LT
Size: 1KB - Virtual size: 99KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ygOYQm
Size: 5KB - Virtual size: 472KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 6KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.uZF
Size: 4KB - Virtual size: 132KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.lYxTST
Size: 3KB - Virtual size: 815KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fbb6750fb8ae781418ba1e81cae62a15

Headers

File Characteristics

Imports

advapi32

kernel32

userenv

icm32

Sections

.icode Size: 3KB - Virtual size: 2KB

.text Size: 14KB - Virtual size: 13KB

.JvOL Size: 2KB - Virtual size: 36KB

.rdata Size: 2KB - Virtual size: 7KB

.MtnP Size: 2KB - Virtual size: 41KB

.edata Size: 10KB - Virtual size: 22KB

.LT Size: 1KB - Virtual size: 99KB

.data Size: 9KB - Virtual size: 49KB

.ygOYQm Size: 5KB - Virtual size: 472KB

.edata Size: 6KB - Virtual size: 35KB

.uZF Size: 4KB - Virtual size: 132KB

.lYxTST Size: 3KB - Virtual size: 815KB

.rsrc Size: 12KB - Virtual size: 12KB

.icode
Size: 3KB - Virtual size: 2KB

.text
Size: 14KB - Virtual size: 13KB

.JvOL
Size: 2KB - Virtual size: 36KB

.rdata
Size: 2KB - Virtual size: 7KB

.MtnP
Size: 2KB - Virtual size: 41KB

.edata
Size: 10KB - Virtual size: 22KB

.LT
Size: 1KB - Virtual size: 99KB

.data
Size: 9KB - Virtual size: 49KB

.ygOYQm
Size: 5KB - Virtual size: 472KB

.edata
Size: 6KB - Virtual size: 35KB

.uZF
Size: 4KB - Virtual size: 132KB

.lYxTST
Size: 3KB - Virtual size: 815KB

.rsrc
Size: 12KB - Virtual size: 12KB