1712f4b59911bc1b294873dc5db676d0_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

1712f4b59911bc1b294873dc5db676d0_JaffaCakes118
Size

160KB
MD5

1712f4b59911bc1b294873dc5db676d0
SHA1

aa53dd91c17ce8efd36a86bda5d1996fd93c7719
SHA256

6e325ed2b19047060187d9ac9b956a0cf91478df32309b340c56431c05fcb0e6
SHA512

ec7cb9d4acf05add20e9ed49bec93e01eca204aa81c0c9ab97b7cb7cf51b20e6ce508f2c063c11b2985423a6b11003c4295fa8da8de23aba2d6999eff172133b
SSDEEP

3072:bgt7WI0nlp3Ng95AIxg8/Fre307qsrDrYSg375SH2qzA8OoL:ZIgQ5AIxHZe3Gqsror7Gco

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1712f4b59911bc1b294873dc5db676d0_JaffaCakes118

Files

1712f4b59911bc1b294873dc5db676d0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5243460a57d7d74eca0fac40672ce6eb

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CopyFileA
DisableThreadLibraryCalls
ExitThread
ExpandEnvironmentStringsA
FormatMessageA
GetConsoleOutputCP
GetCurrentDirectoryA
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetFileAttributesA
GetLocalTime
GetLocaleInfoA
GetModuleFileNameA
GetPrivateProfileStringA
GetShortPathNameA
GetTempFileNameA
GlobalHandle
GlobalLock
HeapAlloc
IsBadReadPtr
IsValidCodePage
LCMapStringA
LeaveCriticalSection
LoadLibraryA
Module32Next
MultiByteToWideChar
RaiseException
ReadFile
ResetEvent
SuspendThread
TerminateProcess
lstrcpyA

user32

CharUpperA
CheckDlgButton
CheckRadioButton
ClientToScreen
CreatePopupMenu
DefWindowProcA
DestroyMenu
DrawIcon
EqualRect
ExitWindowsEx
GetAsyncKeyState
GetCapture
GetFocus
GetKeyState
GetMessageA
GetSysColor
GetSysColorBrush
GetWindowDC
GetWindowTextA
LoadCursorA
MessageBeep
RegisterClassExA
RegisterWindowMessageA
ScreenToClient
SetCapture
SetForegroundWindow
SetMenu
SetRect
SetWindowLongA
SystemParametersInfoA
UpdateWindow
WinHelpA

advapi32

AdjustTokenPrivileges
AllocateAndInitializeSid
ChangeServiceConfig2A
CreateServiceA
DeleteService
EqualSid
FreeSid
GetUserNameA
InitializeSecurityDescriptor
LookupAccountSidA
LookupPrivilegeValueA
OpenServiceA
QueryServiceConfig2A
QueryServiceStatus
RegCreateKeyExA
RegDeleteKeyA
RegDeleteValueA
RegEnumKeyExA
RegEnumValueA
RegFlushKey
RegOpenKeyA
RegOpenKeyExA
RegQueryValueA
RegQueryValueExA
RegSetValueExA
RegisterServiceCtrlHandlerA
SetSecurityDescriptorDacl
SetServiceStatus
StartServiceA
UnlockServiceDatabase

Sections

.text
Size: 146KB - Virtual size: 145KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 81KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data1
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 932B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5243460a57d7d74eca0fac40672ce6eb

Headers

File Characteristics

Imports

kernel32

user32

advapi32

Sections

.text Size: 146KB - Virtual size: 145KB

.data Size: 2KB - Virtual size: 81KB

.bss Size: - Virtual size: 5KB

.data1 Size: 6KB - Virtual size: 6KB

.idata Size: 3KB - Virtual size: 2KB

.rsrc Size: 1024B - Virtual size: 932B

.text
Size: 146KB - Virtual size: 145KB

.data
Size: 2KB - Virtual size: 81KB

.bss
Size: - Virtual size: 5KB

.data1
Size: 6KB - Virtual size: 6KB

.idata
Size: 3KB - Virtual size: 2KB

.rsrc
Size: 1024B - Virtual size: 932B