27b9eb6b63bd565192ef6b5f60118f68_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

27b9eb6b63bd565192ef6b5f60118f68_JaffaCakes118
Size

353KB
MD5

27b9eb6b63bd565192ef6b5f60118f68
SHA1

276aeba6050eaf727a13990316f45ea1a4c9d0b7
SHA256

76e533439e7acb8b0806e58d133d796a94a1a5e9758f2cf0bf5e926aeebd8fd1
SHA512

ea269859b736fb6369ceeed2167fce898b629a6c5700fbcb3efaa5efaae57f45ceddbf3d99fc5b8b86259d1a3af83fce37fe7fced229dbcaddee4b3edc1c7612
SSDEEP

6144:qZyWo7ELDIaC/KfIxmrpIiwEUg+8Jgyzo05:qofIW/2Mi1+eP5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
27b9eb6b63bd565192ef6b5f60118f68_JaffaCakes118

Files

27b9eb6b63bd565192ef6b5f60118f68_JaffaCakes118
.exe windows:1 windows x86 arch:x86

d904e4557d3d5503610fdfa5224f4aea

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

advapi32

AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken
RegCloseKey
RegCreateKeyExA
RegDeleteKeyA
RegDeleteValueA
RegEnumKeyExA
RegEnumValueA
RegOpenKeyA
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA

kernel32

CloseHandle
CreateDirectoryA
CreateFileA
CreateFileMappingA
CreateProcessA
DebugBreak
DeleteFileA
DeleteFileW
EnterCriticalSection
ExitProcess
FileTimeToDosDateTime
FileTimeToLocalFileTime
FileTimeToSystemTime
FindClose
FindFirstFileA
FindNextFileA
FindResourceA
FlushFileBuffers
FormatMessageA
FreeLibrary
FreeResource
GetACP
GetCPInfo
GetCommandLineA
GetCurrentDirectoryA
GetCurrentProcess
GetCurrentThread
GetCurrentThreadId
GetDateFormatA
GetDiskFreeSpaceA
GetDriveTypeA
GetEnvironmentStrings
GetFileAttributesA
GetFileSize
GetFileTime
GetFileType
GetFullPathNameA
GetLastError
GetLocalTime
GetLogicalDrives
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetProcessHeap
GetProfileIntA
GetProfileStringA
GetShortPathNameA
GetStartupInfoA
GetStdHandle
GetStringTypeW
GetSystemDirectoryA
GetSystemInfo
GetTempFileNameA
GetTickCount
GetTimeZoneInformation
GetVersion
GetVolumeInformationA
GetWindowsDirectoryA
GlobalAlloc
GlobalFree
GlobalLock
GlobalMemoryStatus
GlobalUnlock
HeapAlloc
InitializeCriticalSection
IsBadCodePtr
IsBadReadPtr
IsBadStringPtrA
IsBadWritePtr
LCMapStringA
LeaveCriticalSection
LoadLibraryA
LoadResource
LocalAlloc
LocalFree
LockResource
MapViewOfFile
MoveFileExA
MulDiv
MultiByteToWideChar
OutputDebugStringA
RaiseException
ReadFile
RemoveDirectoryA
ResumeThread
RtlUnwind
SetConsoleCtrlHandler
SetCurrentDirectoryA
SetEndOfFile
SetEnvironmentVariableA
SetErrorMode
SetFileAttributesA
SetFilePointer
SetFileTime
SetHandleCount
SetPriorityClass
SetThreadPriority
SizeofResource
SystemTimeToFileTime
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
UnmapViewOfFile
VerLanguageNameA
VirtualAlloc
VirtualFree
WaitForSingleObject
WideCharToMultiByte
WriteFile
WriteProfileStringA
lstrcatA
lstrcmpA
lstrcmpiA
lstrcpyA
lstrcpynA
lstrlenA

mpr

WNetGetConnectionA

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerFindFileA
VerQueryValueA
VerInstallFileA

gdi32

AddFontResourceA
BitBlt
CreateCompatibleBitmap
CreateCompatibleDC
CreateDIBitmap
CreateFontA
CreateFontIndirectA
CreateHalftonePalette
CreatePalette
CreatePen
CreateSolidBrush
DeleteDC
DeleteObject
EnumFontFamiliesA
ExtTextOutA
GetBkColor
GetDeviceCaps
GetObjectA
GetPixel
GetStockObject
GetTextExtentPointA
GetTextMetricsA
LineTo
MoveToEx
PatBlt
RealizePalette
Rectangle
SelectObject
SelectPalette
SetBkColor
SetBkMode
SetTextColor
TextOutA
UnrealizeObject

shell32

ShellExecuteA
ShellExecuteExA

user32

AdjustWindowRectEx
AppendMenuA
BeginPaint
CallWindowProcA
CharLowerA
CharUpperA
CheckDlgButton
CheckRadioButton
ClientToScreen
CreateWindowExA
DdeClientTransaction
DdeConnect
DdeCreateStringHandleA
DdeDisconnect
DdeFreeDataHandle
DdeFreeStringHandle
DdeGetData
DdeGetLastError
DdeInitializeA
DdeUninitialize
DefDlgProcA
DefFrameProcA
DefMDIChildProcA
DefWindowProcA
DeleteMenu
DestroyIcon
DestroyWindow
DispatchMessageA
DrawFocusRect
DrawMenuBar
DrawTextA
EnableMenuItem
EnableWindow
EndDialog
EndPaint
EnumChildWindows
EnumThreadWindows
ExitWindowsEx
FillRect
FindWindowA
FrameRect
GetActiveWindow
GetClassInfoA
GetClassNameA
GetClientRect
GetDC
GetDesktopWindow
GetDlgCtrlID
GetDlgItem
GetDlgItemTextA
GetMessageA
GetParent
GetPropA
GetScrollRange
GetSysColor
GetSysColorBrush
GetSystemMenu
GetSystemMetrics
GetTopWindow
GetWindow
GetWindowDC
GetWindowLongA
GetWindowRect
GetWindowTextA
InflateRect
InvalidateRect
IsDialogMessageA
IsDlgButtonChecked
IsWindow
LockWindowUpdate
MessageBoxA
MoveWindow
PeekMessageA
PostMessageA
PostQuitMessage
PtInRect
RegisterWindowMessageA
ReleaseDC
RemovePropA
ScreenToClient
SendDlgItemMessageA
SendMessageA
SetDlgItemTextA
SetFocus
SetLastErrorEx
SetPropA
SetRect
SetWindowLongA
SetWindowPos
SetWindowTextA
SetWindowWord
ShowWindow
TranslateMessage
UnregisterClassA
UpdateWindow
wsprintfA
wvsprintfA

Exports

Exports

@__lockDebuggerData$qv
@__unlockDebuggerData$qv
__DebuggerHookData
__GetExceptDLLinfo
___CPPdebugHook

Sections

.text
Size: 249KB - Virtual size: 252KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 53KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 38KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d904e4557d3d5503610fdfa5224f4aea

Headers

File Characteristics

Imports

advapi32

kernel32

mpr

version

gdi32

shell32

user32

Exports

Exports

Sections

.text Size: 249KB - Virtual size: 252KB

.data Size: 53KB - Virtual size: 60KB

.tls Size: 512B - Virtual size: 4KB

.rdata Size: 512B - Virtual size: 4KB

.idata Size: 7KB - Virtual size: 8KB

.edata Size: 512B - Virtual size: 4KB

.rsrc Size: 2KB - Virtual size: 4KB

.reloc Size: 38KB - Virtual size: 48KB

.text
Size: 249KB - Virtual size: 252KB

.data
Size: 53KB - Virtual size: 60KB

.tls
Size: 512B - Virtual size: 4KB

.rdata
Size: 512B - Virtual size: 4KB

.idata
Size: 7KB - Virtual size: 8KB

.edata
Size: 512B - Virtual size: 4KB

.rsrc
Size: 2KB - Virtual size: 4KB

.reloc
Size: 38KB - Virtual size: 48KB