2cac43d3700a37e5a345a7b84598dac3_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

2cac43d3700a37e5a345a7b84598dac3_JaffaCakes118
Size

172KB
MD5

2cac43d3700a37e5a345a7b84598dac3
SHA1

59a86a13638e8cfd1dc4b37ae957571399a65892
SHA256

dce90e59c4d21947dc589695ddb46522b46c005c1fbcbd7c5a77e91c087785d8
SHA512

03b8fe1778a5a2e55afb67f440597f83c362b3519f98aaaa3bdc69815ad6de736b807e4675cb3a47b9abc847adb63be256bb659ef09e5a013d93676eff89f944
SSDEEP

3072:9P9v4CpwqtzR0ZQ6vmE7OOcBe9Xh7+YHdqK6H1k:9Vv4Cpws+Q6+E7rKNlH1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2cac43d3700a37e5a345a7b84598dac3_JaffaCakes118

Files

2cac43d3700a37e5a345a7b84598dac3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

90194adaff577d771cc7c7119103fa85

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FlushFileBuffers
CreateFileA
SetErrorMode
InitializeCriticalSection
lstrlenW
InterlockedExchange
LockResource
SetEvent
FindClose
CompareStringA
GlobalFree
FreeEnvironmentStringsA
WaitForSingleObjectEx
GetLocalTime
GlobalLock
ReadFileEx
CreateEventA
SetEndOfFile
FormatMessageW
CreateFileW
SetStdHandle
CloseHandle
LoadResource
CreateEventW
CompareStringW
GetFileSize
GetFileAttributesW
ReleaseMutex
HeapDestroy
SetEnvironmentVariableA
InterlockedExchangeAdd
SleepEx
GlobalAlloc
ReadFile
SetFilePointerEx
GlobalUnlock
ResetEvent
lstrlenA
GetVersionExA
DeleteFileW
WaitForMultipleObjectsEx
GetThreadLocale
GetSystemTime
DeleteFileA
FormatMessageA
GetSystemInfo
RaiseException
TryEnterCriticalSection
GetModuleFileNameW
WriteFileEx
FindCloseChangeNotification
GetStartupInfoA
GetFileAttributesA
SetFilePointer
CreateThread
SizeofResource
LocalFree
FreeLibrary
InterlockedCompareExchange
GetFileSizeEx
RegisterWaitForSingleObject
LocalAlloc
GetModuleHandleA
WaitForSingleObject
VirtualAlloc

user32

SetMenuItemBitmaps
GetWindowWord
SetWindowPos
LoadStringA
SetMenuItemInfoW
DefWindowProcA
RegisterClassA
DestroyIcon
SendMessageA
ShowWindowAsync
GetCursorPos
LoadIconW
SetWindowLongA
SetMenuItemInfoA
GetMenu
GetClientRect
DefWindowProcW
LoadCursorW
GetForegroundWindow
PostMessageA
CreateWindowExW
SetWindowTextW
SetWindowTextA
ReleaseDC
GetMenuItemCount
TranslateMessage
GetWindowTextW
MessageBeep

ole32

CoSetProxyBlanket
CoRegisterClassObject
CoTaskMemRealloc
CoRegisterChannelHook

advapi32

CheckTokenMembership
OpenThreadToken
QueryServiceStatus
GetSecurityDescriptorDacl
GetTokenInformation
RegDeleteKeyA
RegOpenKeyExA
IsValidSid
RegCreateKeyW
LookupAccountSidA
SetSecurityDescriptorDacl
RegCloseKey

shell32

SHBindToParent

msvcrt

__p__fmode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
_except_handler3
__p__commode
__set_app_type
_controlfp
__dllonexit
_onexit

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 132KB - Virtual size: 226KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

90194adaff577d771cc7c7119103fa85

Headers

File Characteristics

Imports

kernel32

user32

ole32

advapi32

shell32

msvcrt

Sections

.text Size: 8KB - Virtual size: 7KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 132KB - Virtual size: 226KB

.rsrc Size: 24KB - Virtual size: 20KB

.text
Size: 8KB - Virtual size: 7KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 132KB - Virtual size: 226KB

.rsrc
Size: 24KB - Virtual size: 20KB