06fa756e59d9dbb9a2b3f6f1f4459495_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

06fa756e59d9dbb9a2b3f6f1f4459495_JaffaCakes118
Size

74KB
MD5

06fa756e59d9dbb9a2b3f6f1f4459495
SHA1

e4d2927a2332a5d9853a542d25a4a35bae8cca76
SHA256

11e3e995977475676c92155ba40bfbc42a367709fab002d3c12cdd6faa0e4929
SHA512

8515c396b5fdcec2b83dda9b84b01dbac8d0fc97672582c86f4a8ee5882b9f9e13141bca3215f8d8d6926731b3a70be0ac541bbdf93201b4cca353c2136173c6
SSDEEP

1536:4akddMwRqsR1YD5UNntBULdUCW9m5YOVjOL9yKzh4o:9GMwRqsR18WNtEqD9m5Id4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
06fa756e59d9dbb9a2b3f6f1f4459495_JaffaCakes118

Files

06fa756e59d9dbb9a2b3f6f1f4459495_JaffaCakes118
.exe windows:5 windows x86 arch:x86

f4051b8ba4d8bdbbbe99f0dde3368463

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

CoRevertToSelf
ReleaseStgMedium
OleQueryCreateFromData
CreateBindCtx
CoInitialize
StgOpenStorage
StgCreateDocfile
CoRevokeClassObject
StgIsStorageFile
CreateStreamOnHGlobal
CreateOleAdviseHolder
CoGetObjectContext
CoInitializeSecurity
CoSetProxyBlanket
CoReleaseMarshalData

advapi32

IsValidAcl
InitializeAcl
RegOpenKeyA
GetAclInformation
RegEnumKeyW
GetUserNameW
RegDeleteValueW
RegOpenKeyExA
RegOpenKeyW
CloseServiceHandle
GetSecurityDescriptorLength
LookupAccountNameW
LookupAccountSidW
RegQueryValueExA
RegEnumKeyExA
GetSecurityDescriptorControl
EqualSid
RegQueryInfoKeyA
OpenThreadToken
RegSetValueExA
LsaQueryInformationPolicy

shell32

ShellExecuteExW
SHBrowseForFolderW
SHGetFolderPathW
SHFileOperationW
SHBrowseForFolderA

user32

GetCursorPos
OffsetRect
EnableMenuItem
EqualRect
GetSysColor
DestroyWindow
EndPaint
LoadStringA
GetSystemMetrics
GetSystemMenu
GetCapture
GetDC
FindWindowA
RegisterWindowMessageW
PeekMessageW
GetClientRect
CharLowerW
CallWindowProcW
RegisterClipboardFormatW
GetClassNameA
GetWindowDC
RegisterClassW
GetPropA
SetDlgItemTextW
IsChild
GetAncestor
DestroyIcon
GetActiveWindow

kernel32

FindFirstFileA
IsBadWritePtr
InterlockedExchange
VirtualFree
WriteConsoleW
GetSystemDirectoryA
TerminateProcess
FindFirstFileW
GetExitCodeProcess
lstrcmpiA
GetFileSize
GetWindowsDirectoryW
GetProcessHeap
CreateFileMappingA
GetConsoleOutputCP
VirtualAlloc
CreateProcessW
SizeofResource
MultiByteToWideChar
lstrcatA
ExitProcess
GlobalAlloc
VirtualProtect
UnhandledExceptionFilter
OpenProcess
GetStringTypeA
SystemTimeToFileTime

rpcrt4

RpcStringFreeW
NdrServerCall2
RpcImpersonateClient
CStdStubBuffer_IsIIDSupported
RpcStringFreeA
IUnknown_QueryInterface_Proxy
CStdStubBuffer_Disconnect
CStdStubBuffer_CountRefs
IUnknown_AddRef_Proxy
NdrStubCall2
UuidCreate
RpcBindingSetAuthInfoExW
RpcStringBindingParseW
RpcBindingFromStringBindingW
UuidToStringA
UuidToStringW
RpcEpResolveBinding

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 15KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 42KB - Virtual size: 91KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

f4051b8ba4d8bdbbbe99f0dde3368463

Headers

File Characteristics

Imports

ole32

advapi32

shell32

user32

kernel32

rpcrt4

Sections

.text Size: 8KB - Virtual size: 7KB

.data Size: 7KB - Virtual size: 7KB

.tls Size: 15KB - Virtual size: 26KB

.idata Size: 42KB - Virtual size: 91KB

.text
Size: 8KB - Virtual size: 7KB

.data
Size: 7KB - Virtual size: 7KB

.tls
Size: 15KB - Virtual size: 26KB

.idata
Size: 42KB - Virtual size: 91KB