f67750cd8211cc2a9a0a1640d56b2dbe_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

f67750cd8211cc2a9a0a1640d56b2dbe_JaffaCakes118
Size

847KB
MD5

f67750cd8211cc2a9a0a1640d56b2dbe
SHA1

325afc778b3fcab4f0f622c9704a5518a5b9b328
SHA256

faa3ab44ed91c86a290a39cc0ab39db31071dd4da4ff9a6179c6417b141f4afd
SHA512

c477e9a89eaf3a4fe0da8ecb2228208688e596d3ac1d3a0d5c83d23666cfc557ffaad8e5e32cf88521b411ea67f44ff297df0ce89ca1da5c3fe37fb0436cafc0
SSDEEP

24576:WnyNsBUvxBHU81lKys9QKNZ99Mq1ycZnpH:jtJKuJqEo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f67750cd8211cc2a9a0a1640d56b2dbe_JaffaCakes118

Files

f67750cd8211cc2a9a0a1640d56b2dbe_JaffaCakes118
.exe windows:5 windows x86 arch:x86

2fd0432c79192d778b929c1c7b9a0be1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ntdll

RtlCopySidAndAttributesArray
RtlFindMostSignificantBit
ZwListenPort
strrchr
_CIlog
RtlGetAce
RtlImageRvaToSection
RtlDeleteSecurityObject
NtReplyWaitReceivePort
RtlDeleteRegistryValue
atoi
NtWriteRequestData
NtQueryMutant
NtListenPort
LdrInitializeThunk
RtlImageDirectoryEntryToData
NtWriteFileGather
qsort
ZwCreateWaitablePort
RtlCreateUserProcess
ZwSetInformationKey
ZwQueryInformationToken
NtDeleteValueKey
RtlFillMemoryUlong

crypt32

CertSerializeCRLStoreElement
CertCreateCertificateContext
CryptInstallOIDFunctionAddress
I_CryptAddSmartCardCertToStore
CryptSignAndEncodeCertificate
CertCreateSelfSignCertificate
CertSetCertificateContextProperty
CryptMsgGetParam
CryptGetAsyncParam
CryptRegisterOIDFunction
I_CryptReleaseLruEntry
CryptVerifyCertificateSignature
CryptMsgOpenToEncode
CryptSIPCreateIndirectData
CertVerifyCertificateChainPolicy
RegEnumValueU
CertDuplicateCertificateContext
CryptFindCertificateKeyProvInfo
CryptMsgVerifyCountersignatureEncoded
I_CryptFlushLruCache

opengl32

wglCopyContext
glColor4iv
glRasterPos2fv
glReadBuffer
glEndList
glBindTexture
glTexGend
glNormal3f
glGetTexLevelParameteriv
glTexGeni
glColor3sv
glMapGrid2f
glVertex4f
glFrontFace
glScissor
wglSetPixelFormat
glLoadIdentity
wglSwapMultipleBuffers
glVertex3dv

kernel32

ReadConsoleOutputCharacterW
CreateHardLinkW
GlobalLock
GlobalFindAtomA
TermsrvAppInstallMode
LoadLibraryA
FindNextFileW
SetupComm
FreeLibraryAndExitThread
GetVolumePathNameA
ShowConsoleCursor
OpenFile
FindVolumeClose
IsValidCodePage
SetConsoleFont
GetThreadPriority
SetComputerNameExW
CreateIoCompletionPort
GetPrivateProfileSectionA
GetNamedPipeHandleStateA
VirtualAlloc
UTUnRegister

dssenh

CPAcquireContext
CPImportKey
CPEncrypt
CPSignHash
CPGenKey
CPGetProvParam
CPDecrypt
CPGetKeyParam
CPHashData
CPGenRandom
CPDestroyHash
CPDestroyKey
CPDeriveKey
CPVerifySignature
CPReleaseContext
CPSetKeyParam

Sections

.text
Size: 748KB - Virtual size: 747KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 91KB - Virtual size: 90KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 992B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2fd0432c79192d778b929c1c7b9a0be1

Headers

DLL Characteristics

File Characteristics

Imports

ntdll

crypt32

opengl32

kernel32

dssenh

Sections

.text Size: 748KB - Virtual size: 747KB

.rdata Size: 91KB - Virtual size: 90KB

.data Size: 4KB - Virtual size: 1.5MB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 1024B - Virtual size: 992B

.text
Size: 748KB - Virtual size: 747KB

.rdata
Size: 91KB - Virtual size: 90KB

.data
Size: 4KB - Virtual size: 1.5MB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 1024B - Virtual size: 992B