132221cfb542a80e72867626a80cd76b_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

132221cfb542a80e72867626a80cd76b_JaffaCakes118
Size

62KB
MD5

132221cfb542a80e72867626a80cd76b
SHA1

69792d99a80878572872ea79d6009eb8f83a5781
SHA256

7d99c35effc2e41024a1c0bcdf2a743c49e99a8535d12acc5aa76dc255d5fd3f
SHA512

69ef86f36f084e879ceae332946b128de6b429fd00b7926135c690490e3a26d7831174c9207c95e3d781007a89cf775f24428b5dfdaa0deba8d1b98fbc06cd5d
SSDEEP

1536:6jgWxpkn9AvYvzkHoYyhNp4gW1JyM7kMrU/EP6/6ewR3:6j1Sn9gYHr4gW1N7kMAsPtp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
132221cfb542a80e72867626a80cd76b_JaffaCakes118

Files

132221cfb542a80e72867626a80cd76b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6cf74d59fb5332ed24d779ce4b0e5417

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

AdjustTokenPrivileges
LockServiceDatabase
OpenServiceA
QueryServiceStatus
RegCloseKey
RegFlushKey
RegQueryValueA
RegQueryValueExA
RegSetValueExA
StartServiceA
UnlockServiceDatabase

kernel32

CloseHandle
CopyFileA
CreateEventA
CreateFileA
CreateMutexA
CreateThread
DeleteCriticalSection
DeleteFileA
DisableThreadLibraryCalls
ExitProcess
ExpandEnvironmentStringsA
FindClose
FindResourceA
FlushFileBuffers
FreeEnvironmentStringsA
FreeLibrary
GetConsoleCP
GetConsoleOutputCP
GetCurrentDirectoryA
GetCurrentProcess
GetCurrentThreadId
GetFileAttributesA
GetLastError
GetLocalTime
GetLocaleInfoA
GetModuleFileNameA
GetModuleHandleA
GetOEMCP
GetPrivateProfileStructA
GetProcAddress
GetProcessHeap
GetStdHandle
GetSystemTime
GetSystemTimeAsFileTime
GetTickCount
GetUserDefaultLCID
GetVersionExA
GlobalLock
GlobalReAlloc
HeapAlloc
HeapFree
InitializeCriticalSection
InterlockedDecrement
IsBadCodePtr
LCMapStringA
LoadLibraryA
LocalAlloc
MapViewOfFile
MoveFileA
MoveFileExA
MulDiv
MultiByteToWideChar
QueryPerformanceCounter
ReadProcessMemory
RemoveDirectoryA
SetCurrentDirectoryA
SetEnvironmentVariableA
SetFileAttributesA
SetLastError
SetPriorityClass
SetThreadPriority
SizeofResource
TlsFree
TlsSetValue
VirtualFree
VirtualProtect
WideCharToMultiByte
WriteFile
lstrcatA
lstrcpyA
lstrcpynA
lstrlenA

user32

CheckMenuItem
CheckRadioButton
DestroyWindow
DialogBoxParamA
DrawFocusRect
EnableMenuItem
FillRect
FindWindowA
GetAsyncKeyState
GetDesktopWindow
GetSubMenu
GetWindowRect
GetWindowTextA
IntersectRect
IsRectEmpty
IsWindowEnabled
IsWindowVisible
LoadBitmapA
LoadIconA
MessageBoxA
MsgWaitForMultipleObjects
PostMessageA
RegisterClassA
SendDlgItemMessageA
SendMessageA
SetFocus
SetRect
SetWindowPos
SetWindowTextA
wsprintfA

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA

Sections

.text
Size: 25KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.CRT
Size: 15KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6cf74d59fb5332ed24d779ce4b0e5417

Headers

File Characteristics

Imports

advapi32

kernel32

user32

version

Sections

.text Size: 25KB - Virtual size: 28KB

.CRT Size: 15KB - Virtual size: 28KB

.data Size: 512B - Virtual size: 4KB

.rdata Size: 512B - Virtual size: 4KB

.idata Size: 3KB - Virtual size: 4KB

.edata Size: 15KB - Virtual size: 16KB

.rsrc Size: 1024B - Virtual size: 4KB

.text
Size: 25KB - Virtual size: 28KB

.CRT
Size: 15KB - Virtual size: 28KB

.data
Size: 512B - Virtual size: 4KB

.rdata
Size: 512B - Virtual size: 4KB

.idata
Size: 3KB - Virtual size: 4KB

.edata
Size: 15KB - Virtual size: 16KB

.rsrc
Size: 1024B - Virtual size: 4KB