10d39186d256a3d5be064ef7d37da34b_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

10d39186d256a3d5be064ef7d37da34b_JaffaCakes118
Size

400KB
MD5

10d39186d256a3d5be064ef7d37da34b
SHA1

5fb295cc9586eda111b9922a89682609ee9e1a1c
SHA256

a03e5747703f8b84376d9fda8be95994aae8ee9ac534ac14b1e18323e7927078
SHA512

2cb4d6efdd2e7144106ece02a19657a000bc0b83dec887ced588351df56587674d1b488522eb4b1e2c4f19fdbca4e138e88838c93027d3c694f2b769fb443040
SSDEEP

6144:P+BtsPfEXYeUnRpfNJ2/TJB01QtTqVawnzgORKJ94w2TJNzGkW9KhGJxGhSsz:mXkfNRpNJV1QtTWzKkTJAvnGhSsz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
10d39186d256a3d5be064ef7d37da34b_JaffaCakes118

Files

10d39186d256a3d5be064ef7d37da34b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

370de1ee28ad89ccd77a6bda68ff330e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DebugBreak
GetSystemTimeAsFileTime
lstrcpyA
LoadLibraryA
FreeLibrary
WaitForMultipleObjects
GetCurrentThread
lstrlenW
MultiByteToWideChar
lstrlenA
GetShortPathNameA
GetModuleHandleA
OutputDebugStringA
SetUnhandledExceptionFilter
GetCurrentThreadId
SetCurrentDirectoryA
GetCommandLineA
lstrcatA
GetPrivateProfileSectionA
CopyFileA
ExpandEnvironmentStringsA
DeleteFileA
CreateMutexA
GetPrivateProfileStringA
ReleaseMutex
GetCurrentProcess
InterlockedExchange
GetFileType
GetSystemInfo
SetFilePointer
SetEndOfFile
WriteFile
MapViewOfFile
CreateFileMappingA
UnmapViewOfFile
GetStringTypeA
GetStringTypeW
GetCPInfo
LCMapStringA
LCMapStringW
CompareStringA
CompareStringW
GlobalAlloc
GetFileInformationByHandle
FileTimeToLocalFileTime
FileTimeToSystemTime
SetEnvironmentVariableA
IsBadCodePtr
IsBadReadPtr
FlushFileBuffers
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetTickCount
Sleep
ResetEvent
ResumeThread
SetEvent
WaitForSingleObject
GetVersionExA
TerminateThread
GetLastError
CreateThread
InterlockedDecrement
InterlockedIncrement
EnterCriticalSection
LeaveCriticalSection
WideCharToMultiByte
DeleteCriticalSection
GlobalFree
InitializeCriticalSection
CreateEventA
GetPrivateProfileIntA
CreateFileA
GetFileSize
ReadFile
FindFirstFileA
FindClose
FormatMessageA
LocalFree
GetProcAddress
CreateToolhelp32Snapshot
Process32First
lstrcmpiA
GetCurrentProcessId
IsBadWritePtr
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetEnvironmentVariableA
HeapSize
TerminateProcess
TlsGetValue
SetLastError
TlsAlloc
TlsSetValue
GetOEMCP
GetACP
SetStdHandle
GetStdHandle
SetHandleCount
ExitProcess
GetVersion
GetStartupInfoA
HeapReAlloc
HeapAlloc
HeapFree
RaiseException
OpenProcess
Process32Next
CloseHandle
GetModuleFileNameA
RtlUnwind
GetTimeZoneInformation
GetSystemTime
GetLocalTime
PeekNamedPipe

user32

DefWindowProcA
ShowWindow
PostThreadMessageA
MsgWaitForMultipleObjects
DispatchMessageA
TranslateMessage
CreateWindowExA
PeekMessageA
CharNextA
RegisterClassExA
RegisterClassA
MessageBoxA
LoadStringA
GetMessageA
DestroyWindow

advapi32

RegCreateKeyExA
RegDeleteKeyA
RegEnumKeyExA
RegOpenKeyExA
RevertToSelf
GetTokenInformation
SetSecurityDescriptorGroup
SetSecurityDescriptorOwner
GetLengthSid
CopySid
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
StartServiceCtrlDispatcherA
QueryServiceStatus
ControlService
DeleteService
CreateServiceA
RegDeleteValueA
SetServiceStatus
RegisterEventSourceA
ReportEventA
DeregisterEventSource
OpenSCManagerA
OpenServiceA
CloseServiceHandle
OpenProcessToken
OpenThreadToken
ImpersonateLoggedOnUser
RegNotifyChangeKeyValue
RegSetValueExA
RegQueryValueExA
RegCloseKey

ole32

CoCreateInstance
CoUninitialize
CoInitializeSecurity
CoInitializeEx
CoRevokeClassObject
CoInitialize
CoDisconnectObject
CoRegisterClassObject

oleaut32

SafeArrayUnaccessData
SafeArrayAccessData
SysStringLen
LoadRegTypeLi
LoadTypeLi
RegisterTypeLi
SysStringByteLen
SafeArrayDestroy
SysAllocString
SysFreeString
VariantClear
SysAllocStringByteLen
VariantInit
SafeArrayCreate

ws2_32

inet_ntoa
inet_addr

crypt32

CertFindCertificateInStore
CertOpenSystemStoreA
CertFreeCertificateContext
CertCloseStore

Sections

.text
Size: 288KB - Virtual size: 286KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 48KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

STLPORT_
Size: 4KB - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

370de1ee28ad89ccd77a6bda68ff330e

Headers

File Characteristics

Imports

kernel32

user32

advapi32

ole32

oleaut32

ws2_32

crypt32

Sections

.text Size: 288KB - Virtual size: 286KB

.rdata Size: 48KB - Virtual size: 44KB

.data Size: 28KB - Virtual size: 37KB

STLPORT_ Size: 4KB - Virtual size: 32B

.rsrc Size: 28KB - Virtual size: 53KB

.text
Size: 288KB - Virtual size: 286KB

.rdata
Size: 48KB - Virtual size: 44KB

.data
Size: 28KB - Virtual size: 37KB

STLPORT_
Size: 4KB - Virtual size: 32B

.rsrc
Size: 28KB - Virtual size: 53KB