52d959c0d05aa1506b92481e5152b5fa_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

52d959c0d05aa1506b92481e5152b5fa_JaffaCakes118
Size

88KB
MD5

52d959c0d05aa1506b92481e5152b5fa
SHA1

0cb27811d0cd8fa55c613c6702b6215db30956ee
SHA256

67307adc197d5ea2a365c2463eee50ac7f65ee8f1e18136212a3fea353a3c943
SHA512

b62ff5263f268f1148e9cd1d8064db7495fa2a117b5ed04d11452c44d700a4d4566d9c5f97849877934406cfc5ad15027e7d012ff9b066f184d9f3c809ab27c2
SSDEEP

1536:gU7E5efHRDx4EVNFJMl9+7oLJLw0w1UGwr27+Y6:q5+RDxXVNULR3w1Ur24

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
52d959c0d05aa1506b92481e5152b5fa_JaffaCakes118

Files

52d959c0d05aa1506b92481e5152b5fa_JaffaCakes118
.exe windows:5 windows x86 arch:x86

acc28c5e82f3376c1657e1b305d893f5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
??3@YAXPAX@Z
??1type_info@@UAE@XZ
_controlfp
__dllonexit
_onexit
??2@YAPAXI@Z
_XcptFilter
?terminate@@YAXXZ
__CxxFrameHandler
_exit
_CxxThrowException

advapi32

SetSecurityDescriptorGroup
OpenProcessToken
GetLengthSid
DeregisterEventSource
ReportEventA
GetSidLengthRequired
InitializeSid
GetSidSubAuthority
IsValidSid
GetAclInformation
AddAce
InitializeAcl
StartServiceCtrlDispatcherA
SetServiceStatus
RegisterServiceCtrlHandlerA
RegisterEventSourceA
GetTokenInformation
SetSecurityDescriptorOwner
AddAccessAllowedAce
CopySid
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
RegSetValueExA
RegQueryValueExA
RegEnumValueA
RegEnumKeyExA
RegDeleteValueA
RegCreateKeyExA
GetAce
RegCloseKey
RegOpenKeyExA

kernel32

ReadFile
WriteFile
GetStartupInfoA
SetEvent
LeaveCriticalSection
EnterCriticalSection
GetModuleFileNameA
DuplicateHandle
CloseHandle
WaitForSingleObject
CreateEventA
InitializeCriticalSection
DeleteCriticalSection
GetModuleHandleA
GetLastError
GetProcAddress
GetCurrentProcessId
GetCurrentThreadId
OpenProcess
CreateFileMappingA
GetCurrentProcess
lstrcpyA
UnmapViewOfFile
WideCharToMultiByte
GetVersionExA
CreatePipe
MapViewOfFile
GetOverlappedResult
CreateFileA
DeviceIoControl
WaitForMultipleObjects
CreateMutexA
TerminateThread
CreateThread
ResetEvent
ReleaseMutex
LocalAlloc
GetThreadLocale
SetThreadLocale
FormatMessageA
LocalFree
lstrlenA
lstrlenW
lstrcmpiA
GetACP
MultiByteToWideChar
ExpandEnvironmentStringsA

user32

MessageBoxA
GetMessageA
TranslateMessage
DispatchMessageA
wsprintfA

Sections

.text
Size: 77KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

acc28c5e82f3376c1657e1b305d893f5

Headers

File Characteristics

Imports

msvcrt

advapi32

kernel32

user32

Sections

.text Size: 77KB - Virtual size: 76KB

.data Size: 1KB - Virtual size: 1KB

.rsrc Size: 8KB - Virtual size: 24KB

.text
Size: 77KB - Virtual size: 76KB

.data
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 8KB - Virtual size: 24KB