15f1db6c8ae7feefc658a8a585624290_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

15f1db6c8ae7feefc658a8a585624290_JaffaCakes118
Size

88KB
MD5

15f1db6c8ae7feefc658a8a585624290
SHA1

748019f9394674f1c51994d39305c12ff4909c60
SHA256

67941244ae88ea271f4253d3b4dfcb36b53dd23ab70c9f01e3eb3ea52fc92c8f
SHA512

49d1cb21ee67236e87f9b9e38f15a52c1acad498ee933dcadc24c5220b9be865153f96a3a09aa4230797a59c4dc484fbe752aba99689bc0c9f309bc9574f2c64
SSDEEP

1536:2r8Z8WTzzN8XTWZMOyqwJYoVAmN3+RUPvgbmNsxUeSixB:FdSROcJYoSmNUmGmNmfB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
15f1db6c8ae7feefc658a8a585624290_JaffaCakes118

Files

15f1db6c8ae7feefc658a8a585624290_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b4fc582ca8aded7d09d8f8b689c8cd52

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetDlgItemInt
CascadeWindows
GetWindowTextLengthA
ChildWindowFromPoint

advapi32

ReadEventLogA
ClearEventLogA
RegLoadKeyA
AdjustTokenPrivileges
BackupEventLogA
AdjustTokenGroups
PrivilegeCheck
RegOpenKeyA
OpenEventLogA

kernel32

VerLanguageNameA
WritePrivateProfileStructA
GetProfileSectionA
GetModuleHandleA
GetProcAddress
GetProcessHeap
TlsGetValue
LocalReAlloc
CreateSemaphoreA
LocalLock
VirtualAlloc
GetComputerNameA
SetEvent
GetExitCodeThread
QueryPerformanceCounter
LocalHandle
GetCurrentProcess
GetLastError
GetFullPathNameA
HeapFree
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
GetCurrentDirectoryA
GetDriveTypeA
HeapAlloc
EnterCriticalSection
LeaveCriticalSection
SetHandleCount
GetStdHandle
GetFileType
DeleteCriticalSection
SetFilePointer
ReadFile
HeapDestroy
HeapCreate
VirtualFree
InitializeCriticalSection
HeapReAlloc
WideCharToMultiByte
GetStringTypeA
GetStringTypeW
SetStdHandle
WriteFile
MultiByteToWideChar
TerminateProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetCurrentThreadId
TlsSetValue
TlsAlloc
SetLastError
RtlUnwind
CloseHandle
CreateFileA
GetCPInfo
GetACP
GetOEMCP
LoadLibraryA
FlushFileBuffers
SetEndOfFile
LCMapStringA
LCMapStringW

version

VerInstallFileA
VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA
VerFindFileA

uxtheme

GetThemeTextMetrics

wsnmp32

ord400

activeds

ord3
ord9
ord23

Sections

.text
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 45KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b4fc582ca8aded7d09d8f8b689c8cd52

Headers

File Characteristics

Imports

user32

advapi32

kernel32

version

uxtheme

wsnmp32

activeds

Sections

.text Size: 27KB - Virtual size: 26KB

.rdata Size: 10KB - Virtual size: 9KB

.data Size: 3KB - Virtual size: 12KB

.rsrc Size: 45KB - Virtual size: 44KB

.reloc Size: 2KB - Virtual size: 2KB

.text
Size: 27KB - Virtual size: 26KB

.rdata
Size: 10KB - Virtual size: 9KB

.data
Size: 3KB - Virtual size: 12KB

.rsrc
Size: 45KB - Virtual size: 44KB

.reloc
Size: 2KB - Virtual size: 2KB