a62ef308fdc64bd3915affa7585201bc_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

a62ef308fdc64bd3915affa7585201bc_JaffaCakes118
Size

179KB
MD5

a62ef308fdc64bd3915affa7585201bc
SHA1

9765e809641237de9daa09cc5592c44a58e0b170
SHA256

522d5491525d787919d074d9cb9dbdd8d91193d6c21ae4604f867a827a85b07e
SHA512

d802fb53e38a286ae06dde1e8d72fea3902d9329cdfb0a1af4c9db05f62ae4ee9827be71fdcb24cea5f0d153e5a818f98310aae26299599641dca51d91ec02ce
SSDEEP

3072:L8svOQAkW/hGG03dj2bLYZurqqMR96F0AXNErDCHC1u815Se6gFprk:L/vOQrSGG0xeYZufMR9ATNEb1l5Syr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a62ef308fdc64bd3915affa7585201bc_JaffaCakes118

Files

a62ef308fdc64bd3915affa7585201bc_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b20e24b4c945a7f8c29fa1fa0436fae4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mprapi

MprConfigServerConnect
MprConfigServerDisconnect
MprConfigGetFriendlyName

newdev

UpdateDriverForPlugAndPlayDevicesW

shell32

SHGetFolderPathW

kernel32

HeapFree
CompareStringA
LCMapStringA
GetConsoleOutputCP
CompareStringW
WriteFile
HeapSize
LeaveCriticalSection
GetCurrentProcess
EnterCriticalSection
VirtualFree
SetStdHandle
RaiseException
TerminateProcess
IsDebuggerPresent
GetStringTypeW
LCMapStringW
ReadFile
GetSystemTimeAsFileTime
GetDateFormatA
SetFilePointer
GetCurrentProcessId
RtlUnwind
EnumResourceTypesA
QueryPerformanceCounter
GetACP
VirtualAlloc
WriteConsoleA
MultiByteToWideChar
HeapDestroy
LoadLibraryA
CreateNamedPipeW
UnhandledExceptionFilter
HeapCreate
GetTimeZoneInformation
IsValidCodePage
GetTimeFormatA
GetOEMCP
InitializeCriticalSection
HeapReAlloc
SetEnvironmentVariableA
SetEndOfFile
GetLocaleInfoA
GetCPInfo
GetTickCount
SetUnhandledExceptionFilter
FreeLibrary
GetStringTypeA

advapi32

LookupPrivilegeDisplayNameA
FreeInheritedFromArray
SetEntriesInAclW
LookupAccountSidW
EqualSid
SetSecurityInfo
OpenSCManagerW
GetAce
LookupPrivilegeValueA
GetInheritanceSourceW
SetEntriesInAclA
RegDeleteKeyW
QueryServiceStatus
RegRestoreKeyW
ChangeServiceConfig2W
CloseServiceHandle
LockServiceDatabase
RegQueryValueExW
RegCloseKey
RegEnumKeyExW
GetNamedSecurityInfoW
GetSecurityInfo
LookupPrivilegeNameA
CreateServiceW
OpenProcessToken
AllocateAndInitializeSid
RegOpenKeyExW
EnumDependentServicesW
ChangeServiceConfigW
StartServiceA
IsValidSecurityDescriptor
QueryServiceLockStatusW
InitializeSecurityDescriptor
AddAce
IsValidAcl
SetNamedSecurityInfoW
RegCreateKeyExW
FreeSid
GetSecurityDescriptorControl
GetTokenInformation
RegDeleteValueW
DeleteService
OpenServiceW
RegGetKeySecurity
SetSecurityDescriptorDacl
RegSetValueExW
UnlockServiceDatabase
ControlService
AdjustTokenPrivileges
InitializeAcl
GetAclInformation
QueryServiceConfigW
RegSaveKeyW
RegEnumValueW

oleacc

LresultFromObject
AccessibleObjectFromPoint

Sections

.text
Size: 64KB - Virtual size: 63KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 151KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 110KB - Virtual size: 109KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b20e24b4c945a7f8c29fa1fa0436fae4

Headers

File Characteristics

Imports

mprapi

newdev

shell32

kernel32

advapi32

oleacc

Sections

.text Size: 64KB - Virtual size: 63KB

.rdata Size: 3KB - Virtual size: 151KB

.data Size: 110KB - Virtual size: 109KB

.rsrc Size: 512B - Virtual size: 4KB

.text
Size: 64KB - Virtual size: 63KB

.rdata
Size: 3KB - Virtual size: 151KB

.data
Size: 110KB - Virtual size: 109KB

.rsrc
Size: 512B - Virtual size: 4KB