3b87dd35bd2583833b8bd449953d1704_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

3b87dd35bd2583833b8bd449953d1704_JaffaCakes118
Size

356KB
MD5

3b87dd35bd2583833b8bd449953d1704
SHA1

aff850aec867769b5e1b43fa78de38b863fdbb82
SHA256

af2edbc828d5d2f1d4f1f06e6de182e0d65b47051cf7e465a4dadb8c69a42c84
SHA512

7a074e1d8f07c0b0481e28521d8e5521efda95dc861ee8241bd0d3b40465182586efccc2cb2692cee61434d7109d9005d0c1390bd95b65a062ab6335c501e26e
SSDEEP

6144:8KNEH2SUeEnYg3ahnn5Wr0x6rUJ0/9KxNJRxyTZ5pSiRhYihPRZSam2Inz9SQa7E:8oS+LaZn5WXrUGFXTZn/hYsPzSamBYfI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3b87dd35bd2583833b8bd449953d1704_JaffaCakes118

Files

3b87dd35bd2583833b8bd449953d1704_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6393fd0f3304820751703adaacac7924

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

LookupPrivilegeValueW
IsValidSecurityDescriptor
GetSecurityDescriptorDacl
AllocateAndInitializeSid
RegQueryValueW
GetSidIdentifierAuthority
CryptGenRandom
RegOpenKeyExA
RegEnumValueW
LsaQueryInformationPolicy
RegCreateKeyExW
ChangeServiceConfigW
OpenSCManagerW
DeleteService
CloseServiceHandle
RegSetValueExW
OpenThreadToken
ConvertStringSecurityDescriptorToSecurityDescriptorW
SetEntriesInAclW
AdjustTokenPrivileges
SetServiceStatus
IsValidSid
RegCreateKeyExA
QueryServiceStatus
SetNamedSecurityInfoW
SetThreadToken
GetSecurityDescriptorControl
ConvertSidToStringSidW
CryptCreateHash
StartServiceW
LookupPrivilegeValueA
GetUserNameW
GetSecurityDescriptorLength

kernel32

GetStdHandle
GetConsoleMode
GetStringTypeA
GetCurrentProcess
LocalAlloc
ExitProcess
WriteProfileStringW
HeapFree
GetACP
WaitForSingleObject
SetLastError
CreateFileMappingA
GetCurrentProcessId
GetTickCount
FileTimeToLocalFileTime
TlsAlloc
GetModuleFileNameA
GetLastError
GetVersion
ReleaseMutex
ExpandEnvironmentStringsW
GetWindowsDirectoryA
GetProcessHeap
GetFileAttributesA
FreeEnvironmentStringsA
WaitForMultipleObjects
FindFirstFileA
QueryPerformanceCounter
GetExitCodeThread
Sleep
VirtualAlloc
SetThreadPriority
GetModuleHandleW
DeleteCriticalSection
HeapReAlloc
GetSystemDirectoryW
IsBadWritePtr
ReleaseSemaphore
GetTempPathA
ResumeThread
GetFileSize
FormatMessageA
GetWindowsDirectoryW
UnhandledExceptionFilter
InterlockedIncrement
GetCurrentThreadId
SetUnhandledExceptionFilter
OpenMutexA
OutputDebugStringA
GetModuleHandleA
GetThreadLocale
GetExitCodeProcess

Sections

.text
Size: 292KB - Virtual size: 291KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.textbss
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: 6KB - Virtual size: 289KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: 5KB - Virtual size: 245KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6393fd0f3304820751703adaacac7924

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

kernel32

Sections

.text Size: 292KB - Virtual size: 291KB

.textbss Size: 8KB - Virtual size: 7KB

DATA Size: 2KB - Virtual size: 1KB

.tls Size: 5KB - Virtual size: 5KB

.tls Size: 4KB - Virtual size: 3KB

BSS Size: 6KB - Virtual size: 289KB

DATA Size: 7KB - Virtual size: 6KB

DATA Size: 3KB - Virtual size: 3KB

.tls Size: 3KB - Virtual size: 2KB

.bss Size: 5KB - Virtual size: 245KB

.bss Size: 1KB - Virtual size: 1KB

.rsrc Size: 17KB - Virtual size: 16KB

.text
Size: 292KB - Virtual size: 291KB

.textbss
Size: 8KB - Virtual size: 7KB

DATA
Size: 2KB - Virtual size: 1KB

.tls
Size: 5KB - Virtual size: 5KB

.tls
Size: 4KB - Virtual size: 3KB

BSS
Size: 6KB - Virtual size: 289KB

DATA
Size: 7KB - Virtual size: 6KB

DATA
Size: 3KB - Virtual size: 3KB

.tls
Size: 3KB - Virtual size: 2KB

.bss
Size: 5KB - Virtual size: 245KB

.bss
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 17KB - Virtual size: 16KB