5589218fb8d5f37565874f661e793f67_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

5589218fb8d5f37565874f661e793f67_JaffaCakes118
Size

105KB
MD5

5589218fb8d5f37565874f661e793f67
SHA1

49081886a063ab9b0958fc8d5d9ae578b2e63057
SHA256

a6e07ff519201355d3820e7eb8787352ad2729aab7fd992275c46cb78822ec0e
SHA512

f1ca4100d7644b37a3b2bf4853723a2bfb39ca077439f35683a6f5324add5601f2f84a372b9abc879e072e1d74a0f4c55df400e5be4d7ca1d49bca56dd061c84
SSDEEP

1536:kdho1mm4AJgWj7CyFd3ZxF8Ac5MZv6fq/MdktE5mwhTa:A+OAT7CyFFaZdke5hhT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5589218fb8d5f37565874f661e793f67_JaffaCakes118

Files

5589218fb8d5f37565874f661e793f67_JaffaCakes118
.exe windows:5 windows x86 arch:x86

9b94545d2b8e649c31e45d7206b858d4

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetEvent
OpenEventA
Process32Next
Process32First
CreateToolhelp32Snapshot
TerminateProcess
GetModuleHandleA
GetTickCount
DeleteFileA
FlushFileBuffers
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
CopyFileA
OutputDebugStringA
GetLastError
CreateFileA
WriteFile
OpenProcess
LoadLibraryA
GetProcAddress
GetCurrentProcess
WriteProcessMemory
GetSystemDirectoryA
GetWindowsDirectoryA
MoveFileExA
CreateThread
CloseHandle
Sleep
CreateProcessA
lstrlenA
GetVersionExA
GetModuleFileNameA
InitializeCriticalSectionAndSpinCount
HeapSize
HeapReAlloc
VirtualAlloc
GetConsoleMode
GetConsoleCP
RtlUnwind
GetCommandLineA
GetStartupInfoA
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
LCMapStringA
WideCharToMultiByte
MultiByteToWideChar
LCMapStringW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapFree
HeapAlloc
RaiseException
ExitProcess
GetStdHandle
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
HeapCreate
VirtualFree
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetStringTypeA
GetStringTypeW
LeaveCriticalSection
EnterCriticalSection
GetLocaleInfoA
SetFilePointer

user32

PostMessageA
FindWindowA
CheckDlgButton

advapi32

AdjustTokenPrivileges
ControlService
StartServiceA
CreateProcessAsUserA
OpenProcessToken
RegQueryValueExA
StartServiceCtrlDispatcherA
RegisterServiceCtrlHandlerExA
GetUserNameA
QueryServiceConfigA
ChangeServiceConfigA
OpenSCManagerA
OpenServiceA
CloseServiceHandle
QueryServiceStatusEx
SetServiceStatus
RegOpenKeyExA
RegSetValueExA
RegCloseKey
LookupPrivilegeValueA

shlwapi

PathFileExistsA

wininet

InternetSetOptionA
HttpOpenRequestA
HttpQueryInfoA
InternetCloseHandle
InternetConnectA
InternetOpenA
HttpSendRequestA
InternetReadFile

Sections

.text
Size: 73KB - Virtual size: 73KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9b94545d2b8e649c31e45d7206b858d4

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

shlwapi

wininet

Sections

.text Size: 73KB - Virtual size: 73KB

.rdata Size: 13KB - Virtual size: 12KB

.data Size: 10KB - Virtual size: 18KB

.rsrc Size: 1024B - Virtual size: 1024B

.reloc Size: 7KB - Virtual size: 6KB

.text
Size: 73KB - Virtual size: 73KB

.rdata
Size: 13KB - Virtual size: 12KB

.data
Size: 10KB - Virtual size: 18KB

.rsrc
Size: 1024B - Virtual size: 1024B

.reloc
Size: 7KB - Virtual size: 6KB