5416bb1d5f6ae8c3600883f3df33394a_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

5416bb1d5f6ae8c3600883f3df33394a_JaffaCakes118
Size

66KB
MD5

5416bb1d5f6ae8c3600883f3df33394a
SHA1

4d1a4005c7829a64628ec5d31724873403d6bcdc
SHA256

a22564081f10b5938811dc65b8c2907abd65605267803b785f9707cb72878e35
SHA512

2b9cfc2a97b02a9ced9a97430f228bcf3f6bb7775c1365a56746f60015b6f5edf0d2885102615439035552beb0ce0d3cc913ae56b3d04c35c7c64bbcad305eac
SSDEEP

1536:9JN5tM49Ik/HWKg1A67JfWtrIa0Uy4VtJF:9JrSWps7JfMUa0Uy4VtJF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5416bb1d5f6ae8c3600883f3df33394a_JaffaCakes118

Files

5416bb1d5f6ae8c3600883f3df33394a_JaffaCakes118
.exe windows:5 windows x86 arch:x86

3a100e97fd3a0e7087f41e3f79e7ad63

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegSetValueExA
RegCloseKey
RegOpenKeyA
RegQueryValueExA
RegEnumKeyExA
RegOpenKeyExA
RegQueryInfoKeyA
RegEnumValueA
RegCreateKeyExA
RegDeleteKeyA
RegDeleteValueA
RegSetKeySecurity
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
RegEnumKeyA
GetSidSubAuthority
GetSidSubAuthorityCount
GetSidIdentifierAuthority
IsValidSid
GetTokenInformation
OpenProcessToken

kernel32

CloseHandle
WriteFile
SetFilePointer
CreateFileA
lstrcatA
lstrcpynA
GetEnvironmentVariableA
lstrcpyA
GetFileAttributesA
MoveFileExA
FreeLibrary
GetProcAddress
LoadLibraryA
GetSystemDirectoryA
DeleteFileA
SetFileAttributesA
SystemTimeToFileTime
GetSystemTime
CopyFileA
ExpandEnvironmentStringsA
GetLastError
WaitForSingleObject
CreateProcessA
CreateDirectoryA
MoveFileA
lstrlenA
SetEnvironmentVariableA
GetWindowsDirectoryA
GetCurrentDirectoryA
GetCommandLineA
SetLastError
GetCurrentProcess
GetVersionExA
GetStartupInfoA
ExitProcess
GetModuleHandleA
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
HeapAlloc
Sleep
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
LCMapStringA
MultiByteToWideChar
LCMapStringW
HeapSize
GetACP
GetOEMCP
GetCPInfo
HeapReAlloc
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
RtlUnwind
SetStdHandle
ReadFile
FlushFileBuffers
CompareStringA
GetSystemDefaultLangID

gdi32

TextOutA

user32

ReleaseDC
GetDC
SystemParametersInfoA
LoadKeyboardLayoutA
wsprintfA

ole32

CoCreateInstance
CoUninitialize
CoInitialize

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

Sections

.text
Size: 54KB - Virtual size: 54KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 10KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

3a100e97fd3a0e7087f41e3f79e7ad63

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

kernel32

gdi32

user32

ole32

version

Sections

.text Size: 54KB - Virtual size: 54KB

.data Size: 10KB - Virtual size: 29KB

.text
Size: 54KB - Virtual size: 54KB

.data
Size: 10KB - Virtual size: 29KB