5286c7e2d7fe61011d71e9b9c678cf0b_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

5286c7e2d7fe61011d71e9b9c678cf0b_JaffaCakes118
Size

59KB
MD5

5286c7e2d7fe61011d71e9b9c678cf0b
SHA1

6e4e77feca36f53e969bc0b017f19d48ff4b2d34
SHA256

e8479781a63aeaf854ee9fc7170b6282d9d0532229d0337e847a6c8021e637f8
SHA512

36194b874aba719e7e66daf61c6c5aeaea63b7047e826366af99239dcafe998309d8e4f618ff5cb479558e76dd6b884e111555599634ef1533a10101cd9d44fb
SSDEEP

1536:SeF0RDe+evOB4+HgZK/9f3jPA37k3gAMY+kjvFPZT:f01eYTgYBjPQ7k3gAMY+aZZT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5286c7e2d7fe61011d71e9b9c678cf0b_JaffaCakes118

Files

5286c7e2d7fe61011d71e9b9c678cf0b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e42ddfa6617040360fb2e8eb7a2e6824

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

AllocateAndInitializeSid
EqualSid
FreeSid
GetUserNameA
RegDeleteKeyA
RegEnumKeyExA
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA

kernel32

CloseHandle
CopyFileA
CreateEventA
CreateMutexA
DeleteAtom
DeleteCriticalSection
DeviceIoControl
DuplicateHandle
ExitProcess
ExpandEnvironmentStringsA
FileTimeToLocalFileTime
FindNextFileA
FormatMessageA
FreeEnvironmentStringsA
GetCPInfo
GetCommandLineA
GetConsoleMode
GetCurrentProcess
GetCurrentThreadId
GetDriveTypeA
GetFileSize
GetLastError
GetLocalTime
GetModuleHandleA
GetOEMCP
GetPrivateProfileSectionA
GetPrivateProfileStructA
GetProcAddress
GetProcessHeap
GetStdHandle
GetStringTypeA
GetSystemInfo
GetSystemTime
GetSystemTimeAsFileTime
GetTempFileNameA
GetThreadLocale
GetTickCount
GetTimeZoneInformation
GetVersionExA
GlobalFree
GlobalLock
GlobalReAlloc
HeapCreate
HeapDestroy
InitializeCriticalSection
InterlockedCompareExchange
IsBadCodePtr
IsBadWritePtr
IsDebuggerPresent
IsValidCodePage
LCMapStringA
LeaveCriticalSection
LoadLibraryA
MoveFileA
OpenEventA
OpenProcess
QueryPerformanceCounter
ReadFile
ReleaseMutex
RtlUnwind
SearchPathA
SetEnvironmentVariableA
SetEvent
SetFileAttributesA
SetFilePointer
SetThreadPriority
SizeofResource
Sleep
TlsAlloc
TlsFree
TlsGetValue
UnmapViewOfFile
VirtualAlloc
VirtualQuery
lstrcatA
lstrcmpiA
lstrcpyA

user32

CharNextA
CharUpperA
CheckDlgButton
DestroyIcon
DestroyWindow
DrawFocusRect
EnableWindow
GetFocus
GetMenuItemCount
GetMessagePos
GetSubMenu
GetSystemMenu
GetWindowDC
IsWindow
IsWindowVisible
MessageBoxA
RegisterClassA
RegisterWindowMessageA
SendDlgItemMessageA
SetDlgItemTextA
SetForegroundWindow
SetMenu
SetTimer
SetWindowTextA
ShowWindow
TrackPopupMenu
UpdateWindow
wsprintfA

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA

Sections

.text
Size: 22KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.CRT
Size: 14KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e42ddfa6617040360fb2e8eb7a2e6824

Headers

File Characteristics

Imports

advapi32

kernel32

user32

version

Sections

.text Size: 22KB - Virtual size: 24KB

.CRT Size: 14KB - Virtual size: 24KB

.data Size: 512B - Virtual size: 4KB

.rdata Size: 512B - Virtual size: 4KB

.idata Size: 3KB - Virtual size: 4KB

.edata Size: 15KB - Virtual size: 16KB

.rsrc Size: 1024B - Virtual size: 4KB

.text
Size: 22KB - Virtual size: 24KB

.CRT
Size: 14KB - Virtual size: 24KB

.data
Size: 512B - Virtual size: 4KB

.rdata
Size: 512B - Virtual size: 4KB

.idata
Size: 3KB - Virtual size: 4KB

.edata
Size: 15KB - Virtual size: 16KB

.rsrc
Size: 1024B - Virtual size: 4KB