894cabf84aa15ed874a8651cc4c01dc5_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

894cabf84aa15ed874a8651cc4c01dc5_JaffaCakes118
Size

279KB
MD5

894cabf84aa15ed874a8651cc4c01dc5
SHA1

2867a5660809fe5046266573c460e9cfd8466386
SHA256

7501c614cdef39d55caceb19e3b5587a2ad5002d827d212fce5459ef46b60e6d
SHA512

e5e1f522073cf325d62bbfcaa4e94d52aba7a60cda339dc34e56c421867e831f3dd06ca0afd930dec77a28bffae0cd9612093b91e912f12f686830ccdaf918af
SSDEEP

6144:3QygN6pN3upp4jIHq4+THn8pwqkRXes/pBt3ooo5iIxF:3jgqBQpKIHq4cc+f7Yb5FT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
894cabf84aa15ed874a8651cc4c01dc5_JaffaCakes118

Files

894cabf84aa15ed874a8651cc4c01dc5_JaffaCakes118
.exe windows:5 windows x86 arch:x86

53f74a69b3041791ae23c53b4313fa0d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

CoImpersonateClient
CoRevertToSelf
CoCreateInstance

kernel32

LockResource
IsDebuggerPresent
SetThreadLocale
HeapDestroy
GetSystemTimeAsFileTime
HeapAlloc
LeaveCriticalSection
RaiseException
HeapSize
EnterCriticalSection
LoadResource
GetACP
HeapReAlloc
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SizeofResource
FindResourceExW
DeleteCriticalSection
GetProcessHeap
GetCurrentThreadId
FormatMessageW
lstrlenW
FindResourceW
GetThreadLocale
CloseHandle
HeapFree
VirtualAlloc

user32

UnregisterClassA
wsprintfW

userenv

UnloadUserProfile

oleaut32

VariantClear
SysAllocStringLen
SafeArrayCopy
SysStringLen
VarBstrCmp
SafeArrayUnlock
SafeArrayGetUBound
LoadRegTypeLi
VariantInit
SafeArrayCreate
SafeArrayGetVartype
SysFreeString
SysAllocString
SafeArrayDestroy
SafeArrayLock
SafeArrayRedim
SafeArrayGetLBound
LoadTypeLi
VarBstrCat
SysStringByteLen
VariantCopy
VariantCopyInd
SysAllocStringByteLen

advapi32

IsValidSid
OpenProcessToken
EqualSid
CopySid
ConvertStringSidToSidW
OpenThreadToken
GetLengthSid
LookupAccountSidW
GetTokenInformation

iphlpapi

GetTcpTable
GetUdpTable
InternalCreateIpNetEntry
GetAdaptersAddresses
SetIpNetEntry
GetBestRoute
GetTcpStatisticsEx
GetInterfaceInfo
IpRenewAddress

msvidc32

DriverProc

Sections

.text
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 250KB - Virtual size: 1.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

53f74a69b3041791ae23c53b4313fa0d

Headers

File Characteristics

Imports

ole32

kernel32

user32

userenv

oleaut32

advapi32

iphlpapi

msvidc32

Sections

.text Size: 25KB - Virtual size: 25KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 250KB - Virtual size: 1.0MB

.rsrc Size: 512B - Virtual size: 4KB

.text
Size: 25KB - Virtual size: 25KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 250KB - Virtual size: 1.0MB

.rsrc
Size: 512B - Virtual size: 4KB