0150189174120cd63d33710b1722b4e3_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

0150189174120cd63d33710b1722b4e3_JaffaCakes118
Size

237KB
MD5

0150189174120cd63d33710b1722b4e3
SHA1

4dbb4ec0d95b5dd594dcd7827b7dd2d31351d655
SHA256

1e39d8dbf923a557e54726e9572af1cf2438c20f83e449352208d12d2307ecce
SHA512

c367e9112228599104511deaeb612ee4029315588be8f4c66c0e7336c152c59b3ce6fe7945fd1876196c6ac38077190b933c374baf1cdde8f1d197fb96e22bc5
SSDEEP

1536:LU5cLTg4j8JcqnQAVZDIMpJ5VFzhJc+ztaNJDhjTsI1eXRXb4Nkamr5gWb7diJqQ:+QMpZJXqN91eXRLzamr5gWb7dAxduQP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0150189174120cd63d33710b1722b4e3_JaffaCakes118

Files

0150189174120cd63d33710b1722b4e3_JaffaCakes118
.exe windows:5 windows x86 arch:x86

40ed4ca5a8f2c4415daf6f1621cea15b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTickCount
GetProcessHeap
SetEndOfFile
CreateFileA
CreateFileW
CopyFileA
LoadLibraryA
CompareStringW
CompareStringA
SetStdHandle
WriteConsoleW
GetModuleFileNameA
Sleep
FindFirstFileA
FindNextFileA
FindClose
GetFileAttributesA
SetFileAttributesA
AllocConsole
GetCurrentThread
GetLastError
GetCurrentProcess
LocalAlloc
LocalFree
CloseHandle
GetLocaleInfoW
GetDriveTypeA
InterlockedIncrement
InterlockedDecrement
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetSystemTimeAsFileTime
DeleteFileA
SetEnvironmentVariableA
GetCurrentDirectoryA
SetCurrentDirectoryA
RtlUnwind
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RaiseException
HeapFree
GetCommandLineA
GetStartupInfoA
LCMapStringA
WideCharToMultiByte
MultiByteToWideChar
LCMapStringW
GetCPInfo
HeapAlloc
GetTimeZoneInformation
GetACP
GetOEMCP
IsValidCodePage
GetModuleHandleW
GetProcAddress
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
SetHandleCount
GetStdHandle
GetFileType
WriteFile
GetConsoleCP
GetConsoleMode
FlushFileBuffers
ReadFile
SetFilePointer
ExitProcess
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetCurrentProcessId
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
HeapSize
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
GetExitCodeProcess
WaitForSingleObject
CreateProcessA
InitializeCriticalSectionAndSpinCount
WriteConsoleA
GetConsoleOutputCP
GetFullPathNameA

user32

GetLastInputInfo
EnumWindows
GetClassNameA
SetForegroundWindow
GetForegroundWindow
GetWindowTextA
VkKeyScanA
keybd_event
FindWindowA
ShowWindow

advapi32

OpenThreadToken
OpenProcessToken
DuplicateToken
AllocateAndInitializeSid
InitializeSecurityDescriptor
GetLengthSid
InitializeAcl
AddAccessAllowedAce
SetSecurityDescriptorDacl
SetSecurityDescriptorGroup
SetSecurityDescriptorOwner
IsValidSecurityDescriptor
AccessCheck
FreeSid
RegSetValueA

Sections

.text
Size: 108KB - Virtual size: 107KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 18KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 83KB - Virtual size: 82KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

40ed4ca5a8f2c4415daf6f1621cea15b

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

Sections

.text Size: 108KB - Virtual size: 107KB

.rdata Size: 27KB - Virtual size: 26KB

.data Size: 18KB - Virtual size: 25KB

.rsrc Size: 83KB - Virtual size: 82KB

.text
Size: 108KB - Virtual size: 107KB

.rdata
Size: 27KB - Virtual size: 26KB

.data
Size: 18KB - Virtual size: 25KB

.rsrc
Size: 83KB - Virtual size: 82KB