fc27ea74c6175d58402b8453992e1228_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

fc27ea74c6175d58402b8453992e1228_JaffaCakes118
Size

254KB
MD5

fc27ea74c6175d58402b8453992e1228
SHA1

197ef6f38a7cced84fd59606c1cfb8c2f9eea9c4
SHA256

fb511f6b9ef9a5db3c6ad5bba47ab487569d8a9b617a85de83d5b2a822b7221e
SHA512

3a2b130a34dad95a0598edb23d9a82603890e15efc2edbb424039ee81ba85b569d9e89e017281146cf56c69820164a50379ad4974053cec96692e70ad3fa57bf
SSDEEP

6144:xZx4wXije2Pyp4qHv5e4xrnMdyaIlrAB/M+IJGSC8e:xZx3XiLap42xDXFrAJMHGt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fc27ea74c6175d58402b8453992e1228_JaffaCakes118

Files

fc27ea74c6175d58402b8453992e1228_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7057a76d4e9efb2abd097bde8b2536aa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetLastError
VerifyVersionInfoW
FreeConsole
GetCurrentDirectoryW
GetConsoleWindow
GetModuleHandleW
GetNumberOfConsoleInputEvents
GetCurrentThreadId
DisableThreadLibraryCalls
VerSetConditionMask
lstrlenW
LockResource
CreateIoCompletionPort
GlobalFree
DeleteCriticalSection
SetErrorMode
SetEndOfFile
SetConsoleMode
WriteConsoleW
CreateDirectoryW
EnterCriticalSection
OutputDebugStringW
DeleteFileW
HeapDestroy
CreateMutexW
GetFileSize
SetConsoleActiveScreenBuffer
SetStdHandle
GetUserDefaultUILanguage
GetSystemDirectoryW
LocalAlloc
GetConsoleScreenBufferInfo
SetConsoleWindowInfo
WriteConsoleOutputCharacterW
TerminateThread
FillConsoleOutputCharacterW
SetWaitableTimer
FileTimeToSystemTime
PulseEvent
ReadConsoleInputW
RegisterWaitForSingleObject
WaitForMultipleObjectsEx
GetConsoleMode
SetConsoleScreenBufferSize
FreeLibrary
CloseHandle
GetStdHandle
HeapAlloc
ExitThread
WriteFile
GetWindowsDirectoryW
ProcessIdToSessionId
GetLongPathNameW
IsDebuggerPresent
GetProcessHeap
FlushFileBuffers
SetFilePointer
SetConsoleTitleW
SetConsoleCtrlHandler
CreateFileW
FindFirstFileW
CreateEventW
SizeofResource
PostQueuedCompletionStatus
GetThreadPriority
OpenEventW
WideCharToMultiByte
GetCommandLineW
SetConsoleCursorInfo
VirtualQuery
VirtualFree
ReadFile
UnhandledExceptionFilter
WaitForMultipleObjects
LeaveCriticalSection
GetThreadContext
SetUnhandledExceptionFilter
CancelWaitableTimer
LoadLibraryExW
VirtualAlloc
FindResourceW
CreateConsoleScreenBuffer
EnumUILanguagesW
GetSystemTime
GetProcessTimes
GetSystemInfo
GetTempPathW
GlobalUnlock
GetSystemDefaultUILanguage
GetConsoleCursorInfo
LocalFree
TryEnterCriticalSection
HeapFree
WaitForSingleObject
OpenProcess
ReadProcessMemory
GetFileType
SetThreadPriority
ResetEvent
OpenMutexW
CreateProcessW
LoadResource
GetQueuedCompletionStatus
OpenSemaphoreW
CreateThread
SuspendThread
SystemTimeToFileTime
lstrlenA
SetConsoleTextAttribute
RaiseException
lstrcpyW
ReleaseSemaphore
GetLocalTime
CreateSemaphoreW
GetConsoleTitleW
GlobalAlloc
FormatMessageW
UnregisterWaitEx
GetSystemTimeAsFileTime
HeapSize
GetShortPathNameW
CreateWaitableTimerW
lstrcatW
FillConsoleOutputAttribute
CancelIo
HeapReAlloc
GlobalLock
FindResourceExW
SetConsoleCursorPosition
ReleaseMutex
FindClose
ResumeThread
DuplicateHandle
MoveFileExW
AllocConsole
GlobalSize
FindNextFileW
VirtualAllocEx
IsBadWritePtr

user32

GetMessageW
CreateWindowExW
DispatchMessageW
GetSystemMetrics
DefWindowProcW
GetWindowLongW
TranslateMessage
UnregisterClassW
GetMessageA
IsWindowUnicode
MsgWaitForMultipleObjectsEx
RegisterClassExW
GetClassInfoExW
PeekMessageW
SetWindowLongW
wsprintfW
DispatchMessageA
PostMessageW
CharPrevW
DestroyWindow
CharNextW
PostThreadMessageW

ole32

CoUninitialize
CoInitializeEx
OleSaveToStream
CoCreateGuid
OleLoadFromStream
CreateStreamOnHGlobal
GetHGlobalFromStream
CoCreateInstance
IIDFromString
StringFromGUID2

oleaut32

SafeArrayPutElement
SafeArrayCreateVector
SetErrorInfo
SafeArrayRedim
SafeArrayAccessData
SafeArrayUnaccessData
GetErrorInfo
SysAllocString
SysStringByteLen
SysFreeString
SafeArrayLock
SafeArrayCreate
VariantInit
SysAllocStringByteLen
VariantChangeType
SafeArrayPtrOfIndex
SafeArrayGetElement
VariantClear
SafeArrayUnlock
VariantCopyInd
CreateErrorInfo

userenv

GetAllUsersProfileDirectoryA
GetAppliedGPOListW
GetAppliedGPOListA
GetProfileType
RsopFileAccessCheck

iasacct

DllUnregisterServer

Sections

.text
Size: 222KB - Virtual size: 222KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.zOxeIh
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rxrBol
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CtsYXM
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.dlvdR
Size: 512B - Virtual size: 153B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.qvITWxq
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 152KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.OnLhVxq
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.JOwKniy
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

7057a76d4e9efb2abd097bde8b2536aa

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

ole32

oleaut32

userenv

iasacct

Sections

.text Size: 222KB - Virtual size: 222KB

.zOxeIh Size: 2KB - Virtual size: 1KB

.rxrBol Size: 2KB - Virtual size: 2KB

.CtsYXM Size: 1KB - Virtual size: 1KB

.rdata Size: 5KB - Virtual size: 41KB

.dlvdR Size: 512B - Virtual size: 153B

.qvITWxq Size: 3KB - Virtual size: 3KB

.data Size: 8KB - Virtual size: 152KB

.rsrc Size: 2KB - Virtual size: 2KB

.OnLhVxq Size: 1KB - Virtual size: 1KB

.JOwKniy Size: 3KB - Virtual size: 3KB

.text
Size: 222KB - Virtual size: 222KB

.zOxeIh
Size: 2KB - Virtual size: 1KB

.rxrBol
Size: 2KB - Virtual size: 2KB

.CtsYXM
Size: 1KB - Virtual size: 1KB

.rdata
Size: 5KB - Virtual size: 41KB

.dlvdR
Size: 512B - Virtual size: 153B

.qvITWxq
Size: 3KB - Virtual size: 3KB

.data
Size: 8KB - Virtual size: 152KB

.rsrc
Size: 2KB - Virtual size: 2KB

.OnLhVxq
Size: 1KB - Virtual size: 1KB

.JOwKniy
Size: 3KB - Virtual size: 3KB