f68d75326cf45c919769e5127cab83ea_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

f68d75326cf45c919769e5127cab83ea_JaffaCakes118
Size

276KB
MD5

f68d75326cf45c919769e5127cab83ea
SHA1

0b220a1d2d5f48b622c63d55d137ab245dd1b3bf
SHA256

7d94f2d978dbd6f4327c8b4fe83dc53dbc77346a0d8185475d190fed4b322131
SHA512

8d0cb488bf6ed4621f6007905bcc040b51995a5e48a9ac20605e5d32615006d3776d0ada14b77c3ae757ebd4ee1bdc198d235656cd7b55cb616a4f8abb9f8d0b
SSDEEP

6144:2S/8blfrNe/m98ixGx1TDnhpzKrHnbGiVyZF3/CAWEeWp:2S/8btrisYTDnh9K8WP0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f68d75326cf45c919769e5127cab83ea_JaffaCakes118

Files

f68d75326cf45c919769e5127cab83ea_JaffaCakes118
.exe windows:4 windows x86 arch:x86

41d29e2cbf9a957289b64789f79c1a0e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ConnectNamedPipe
lstrlenA
OutputDebugStringA
IsBadWritePtr
IsBadStringPtrA
IsBadReadPtr
GetVersionExA
GetTickCount
GetSystemInfo
GetStartupInfoA
GetLocalTime
GetHandleInformation
GetFileTime
GetFileSize
GetCurrentThreadId
GetComputerNameA
GetCommandLineA
GetACP
FreeLibrary
LoadLibraryA
lstrcpynA
lstrcmpiA
lstrcmpA
lstrcpyA
lstrcatA
SetEnvironmentVariableA
FreeEnvironmentStringsA
GetEnvironmentStrings
SetTimeZoneInformation
GetTimeZoneInformation
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InterlockedCompareExchange
InterlockedIncrement
GlobalUnlock
SetEvent
GlobalReAlloc
ExitThread
ExitProcess
CreateThread
GlobalFindAtomA
GlobalDeleteAtom
GlobalAddAtomA
DeleteAtom
AddAtomA
GetWindowsDirectoryA
DeleteFileA
SetFilePointer
FlushFileBuffers
CloseHandle
CreateFileA
CopyFileA
WaitForSingleObjectEx
WaitForSingleObject
SetThreadPriority
ResetEvent
OpenEventA
MoveFileA
HeapReAlloc
TlsGetValue
TlsSetValue
TlsFree
TlsAlloc
GetCurrentProcessId
GetModuleHandleA
GetSystemTimeAdjustment
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
VirtualAlloc
GetOEMCP
GetCPInfo
DisconnectNamedPipe
CreateEventA
CreateNamedPipeA
WaitForMultipleObjects
GetOverlappedResult
ReadFile
GetLastError
WriteFile
HeapFree
GetProcessHeap
GlobalLock
HeapAlloc
RtlUnwind
VirtualFree
HeapCreate
HeapDestroy
GetFileType
GetStdHandle
SetHandleCount
GetProcAddress
GetVersion
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
GetStringTypeW

user32

KillTimer
MessageBoxA
SetTimer
wsprintfA
GetParent
GetWindowTextLengthA

advapi32

FreeSid
GetLengthSid
GetTokenInformation
InitializeSecurityDescriptor
RegCloseKey
RegCreateKeyExA
RegEnumValueA
RegQueryValueExA
RegOpenKeyA
RegNotifyChangeKeyValue
AllocateAndInitializeSid

shell32

CommandLineToArgvW

ole32

CoUninitialize
CoInitialize
OleRun
CoGetMalloc

Sections

.code
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 244KB - Virtual size: 2.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

41d29e2cbf9a957289b64789f79c1a0e

Headers

File Characteristics

Imports

kernel32

user32

advapi32

shell32

ole32

Sections

.code Size: 8KB - Virtual size: 4KB

.text Size: 12KB - Virtual size: 10KB

.rdata Size: 8KB - Virtual size: 4KB

.data Size: 244KB - Virtual size: 2.2MB

.code
Size: 8KB - Virtual size: 4KB

.text
Size: 12KB - Virtual size: 10KB

.rdata
Size: 8KB - Virtual size: 4KB

.data
Size: 244KB - Virtual size: 2.2MB