JaffaCakes118_1734e8f448bef35f13c5d9e905012ce7

Sharing

Copy URL

Twitter E-mail

General

Target

JaffaCakes118_1734e8f448bef35f13c5d9e905012ce7
Size

252KB
MD5

1734e8f448bef35f13c5d9e905012ce7
SHA1

ee76d31073658003bf5376d84da3de80b460321f
SHA256

617bb1d395393738511d4de77cb56fc26952539e116dd1031649b89ae7e57be2
SHA512

b4030df110f63fdf4f2b7c944f37942d5ba54c313f1effbac4cadbf5a03d2f7a89c640bdae22eca761e2657ae5833fa0c53295af944519087e7e3c11deb733d8
SSDEEP

6144:s1rwii7st1Y+S6pYQCR+gs74dVGwG+oISthMZzLkV:sT+sH4wgsLMFkV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_1734e8f448bef35f13c5d9e905012ce7

Files

JaffaCakes118_1734e8f448bef35f13c5d9e905012ce7
.exe windows:4 windows x86 arch:x86

729e2b8cebe03557fa750328914aa7f2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

version

GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW

ws2_32

WSACleanup
inet_ntoa
gethostbyname
gethostname
WSAStartup

kernel32

GetProcessHeap
RaiseException
CreateMutexW
CreateDirectoryW
RemoveDirectoryW
SetErrorMode
GetExitCodeThread
MoveFileW
GetSystemTime
GetCurrentThreadId
IsDebuggerPresent
SetUnhandledExceptionFilter
GetSystemDirectoryW
FileTimeToSystemTime
GlobalAlloc
lstrlenW
lstrcmpiW
DosDateTimeToFileTime
ExpandEnvironmentStringsA
WaitForSingleObject
CreateEventW
LoadResource
FindResourceW
FreeLibrary
LocalFree
lstrlenA
OpenEventW
SystemTimeToFileTime
GetLocalTime
GetModuleHandleW
GetTempPathW
lstrcmpW
GetProcAddress

user32

GetForegroundWindow
MessageBoxW

advapi32

SetSecurityDescriptorDacl
InitializeSecurityDescriptor
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
AdjustTokenPrivileges
LookupPrivilegeValueW
RegSetValueExW
RegCreateKeyExW
RegDeleteValueW
CreateProcessAsUserW
SetSecurityInfo
SetEntriesInAclW
BuildExplicitAccessWithNameW
GetSecurityDescriptorDacl
GetSecurityInfo
DuplicateTokenEx
RegQueryValueExA
RegOpenKeyExA
DeregisterEventSource
ReportEventW
RegisterEventSourceW
GetTokenInformation
OpenProcessToken
ControlService
QueryServiceStatus
CloseServiceHandle
OpenServiceW
OpenSCManagerW
StartServiceW
QueryServiceConfigW
ImpersonateLoggedOnUser
RevertToSelf
SetThreadToken
LookupAccountSidW
GetUserNameW

shell32

ShellExecuteW

shlwapi

PathGetDriveNumberW

quartz

AMGetErrorTextA
DllUnregisterServer
DBToAmpFactor
AMGetErrorTextW
DllRegisterServer
AmpFactorToDB
DllCanUnloadNow

dsauth

StoreSetSearchSubTree
StoreInitHandle

Sections

.text
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.o
Size: 1KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.NCfFn
Size: 5KB - Virtual size: 558KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.HFHP
Size: 81KB - Virtual size: 169KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.G
Size: 1KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ReMw
Size: 2KB - Virtual size: 122KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 6KB - Virtual size: 160KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.BmRgDG
Size: 135KB - Virtual size: 196KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

729e2b8cebe03557fa750328914aa7f2

Headers

File Characteristics

Imports

version

ws2_32

kernel32

user32

advapi32

shell32

shlwapi

quartz

dsauth

Sections

.text Size: 13KB - Virtual size: 12KB

.o Size: 1KB - Virtual size: 69KB

.rdata Size: 3KB - Virtual size: 21KB

.NCfFn Size: 5KB - Virtual size: 558KB

.HFHP Size: 81KB - Virtual size: 169KB

.G Size: 1KB - Virtual size: 47KB

.ReMw Size: 2KB - Virtual size: 122KB

.data Size: 6KB - Virtual size: 160KB

.BmRgDG Size: 135KB - Virtual size: 196KB

.rsrc Size: 2KB - Virtual size: 2KB

.text
Size: 13KB - Virtual size: 12KB

.o
Size: 1KB - Virtual size: 69KB

.rdata
Size: 3KB - Virtual size: 21KB

.NCfFn
Size: 5KB - Virtual size: 558KB

.HFHP
Size: 81KB - Virtual size: 169KB

.G
Size: 1KB - Virtual size: 47KB

.ReMw
Size: 2KB - Virtual size: 122KB

.data
Size: 6KB - Virtual size: 160KB

.BmRgDG
Size: 135KB - Virtual size: 196KB

.rsrc
Size: 2KB - Virtual size: 2KB