2b5c64d0ae335be2b30de30ed5cf9b71_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

2b5c64d0ae335be2b30de30ed5cf9b71_JaffaCakes118
Size

364KB
MD5

2b5c64d0ae335be2b30de30ed5cf9b71
SHA1

57a809107f1810a3ed01d4baf09f89a1fb562757
SHA256

33e6272f8a84de06327c40ad72efd8537c82d5f9d86b082ef1f6cfe7031f7c3b
SHA512

96ebf2562a60ef245aea06decf83298979368e4c4dabaa107068e430d7fe86af5f996cfffba95e7f1c5ef411e7d1265d24a84716be63eaedfd48ad3aac4dc4e8
SSDEEP

6144:REAU1eeD624pGSoJDZ2sqIrU5AsZBbgyg4s43yirHwlzKPm:RvU1eeD6282JtOI2D3bzsEHrQBKP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
2b5c64d0ae335be2b30de30ed5cf9b71_JaffaCakes118

Files

2b5c64d0ae335be2b30de30ed5cf9b71_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bbf0880943931eac4965920ffd01faa7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SendMessageA
GetClassInfoExW
CharUpperBuffW
GetUserObjectInformationW
SetForegroundWindow
CreateCursor
CloseDesktop
GetDoubleClickTime
GetClipCursor
RegisterWindowMessageA
IsDlgButtonChecked
SendDlgItemMessageA
TranslateAcceleratorA
DispatchMessageA
RegisterClipboardFormatW
SetRect
SystemParametersInfoA
GetDlgItemTextA
SetWindowPlacement
EnableWindow
GetWindowLongA
LoadMenuA
GetMenu
GetForegroundWindow
LoadCursorFromFileA
PtInRect
DdeFreeStringHandle
GetClipboardFormatNameW
RegisterClassExW
GetDlgItem
GetClassNameW
FindWindowExW
SendNotifyMessageW
SystemParametersInfoW
ModifyMenuA
DestroyAcceleratorTable
ShowOwnedPopups
InvalidateRect
SetWindowLongW
GetDlgItemTextW
GetWindowModuleFileNameA
IsChild
CreateDialogParamA
ChildWindowFromPointEx
GetMessageExtraInfo
GetSysColorBrush
IsCharLowerA

lz32

LZCopy

msvcrt

_controlfp
_wutime64
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
acos
_ismbcalpha
scanf
_onexit
__dllonexit
_wcsdup
_getwch

advapi32

RevertToSelf
ReportEventW
RegQueryValueW
GetUserNameW
MakeAbsoluteSD
SetEntriesInAclW
RegNotifyChangeKeyValue
RegCreateKeyExA
SetSecurityDescriptorOwner
ChangeServiceConfig2W
CreateProcessAsUserW
LsaOpenPolicy
RegOpenKeyExW
ControlService
SetFileSecurityA
LsaFreeMemory
GetLengthSid
CopySid
OpenSCManagerA
QueryServiceConfigW
GetKernelObjectSecurity
GetSidSubAuthority
GetSidLengthRequired
RegUnLoadKeyW
RegSetKeySecurity
LookupPrivilegeValueA
RegisterServiceCtrlHandlerA
OpenServiceA
CloseServiceHandle
AdjustTokenPrivileges
RegSetValueExA
LsaQueryInformationPolicy
SetSecurityDescriptorSacl
LookupPrivilegeValueW
OpenThreadToken
CreateProcessAsUserA
BuildExplicitAccessWithNameA
ImpersonateSelf
GetSecurityDescriptorDacl
CreateServiceA
SetSecurityDescriptorGroup
RegQueryInfoKeyW

Sections

.text
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 60KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 544KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 220KB - Virtual size: 219KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

bbf0880943931eac4965920ffd01faa7

Headers

File Characteristics

Imports

user32

lz32

msvcrt

advapi32

Sections

.text Size: 68KB - Virtual size: 67KB

.rdata Size: 60KB - Virtual size: 56KB

.data Size: 12KB - Virtual size: 544KB

.rsrc Size: 220KB - Virtual size: 219KB

.text
Size: 68KB - Virtual size: 67KB

.rdata
Size: 60KB - Virtual size: 56KB

.data
Size: 12KB - Virtual size: 544KB

.rsrc
Size: 220KB - Virtual size: 219KB