JaffaCakes118_c7c9e4614647ed74bc89bc8b93fc25da

Sharing

Copy URL

Twitter E-mail

General

Target

JaffaCakes118_c7c9e4614647ed74bc89bc8b93fc25da
Size

274KB
MD5

c7c9e4614647ed74bc89bc8b93fc25da
SHA1

763c4d0d1512cc20b216334dc7e81eca03470194
SHA256

2acc01a8b83d71beea52a30ff0c2bac21b8afcb03a7295fad4b43bea4947ee75
SHA512

6160e0a89b7d89864d5331f74b72c4a80c81989517d56abb81c87251d5a40b2cab8d62f9c2846429e45182b0cba2c12a641a24e5130d3b6627b038279f1cba11
SSDEEP

6144:2mwed2qXnxBpk/cwpjPr67peWHEGt+CNN1H5eXmR:2mwedTntk/cwpjuYWH5ECN/HUXq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_c7c9e4614647ed74bc89bc8b93fc25da

Files

JaffaCakes118_c7c9e4614647ed74bc89bc8b93fc25da
.exe windows:4 windows x86 arch:x86

8f0bbabc37d1eac880aa203344dbf296

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

WSACleanup
WSAGetLastError
WSACreateEvent
WSACloseEvent
socket
closesocket
gethostbyname
ntohs
send
recv
shutdown
connect
WSAEnumNetworkEvents
WSAAccept
htonl
htons
bind
listen
WSAEventSelect
inet_addr
gethostname
WSAStartup

urlmon

FindMimeFromData

kernel32

WaitForMultipleObjects
lstrlenW
lstrcpynW
CreateDirectoryW
WaitForSingleObject
LocalFree
CreateEventW
lstrcpyW
OpenEventW
CreateMutexW
GetModuleHandleW
GetTempPathW
GetTimeFormatW
GetDateFormatW
GetLocalTime
FreeLibrary
TlsAlloc
GetProcessHeap
GetCurrentThreadId
IsDebuggerPresent
SetUnhandledExceptionFilter
LoadLibraryW
GetProcAddress

advapi32

ConvertStringSidToSidW
CreateProcessAsUserW
RegisterServiceCtrlHandlerW
SetServiceStatus
StartServiceCtrlDispatcherW
ControlService
DeleteService
CreateServiceW
OpenSCManagerW
OpenServiceW
CloseServiceHandle
RegConnectRegistryW
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
ConvertStringSecurityDescriptorToSecurityDescriptorW
StartServiceW
QueryServiceStatus
LookupPrivilegeValueW
AdjustTokenPrivileges
GetSecurityInfo
GetSecurityDescriptorDacl
GetUserNameW
BuildExplicitAccessWithNameW
SetEntriesInAclW
SetSecurityInfo
DuplicateTokenEx
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
OpenProcessToken
GetTokenInformation
LookupAccountSidW
SetTokenInformation

ole32

CoCreateInstance
CoInitialize
CoUninitialize

user32

wsprintfW

quartz

AMGetErrorTextW
DllCanUnloadNow

browseui

DllGetVersion

Sections

.text
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.l
Size: 1024B - Virtual size: 200KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.Mz
Size: 5KB - Virtual size: 574KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.dCisa
Size: 1KB - Virtual size: 193KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.chhYG
Size: 4KB - Virtual size: 81KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.vR
Size: 4KB - Virtual size: 321KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.u
Size: 98KB - Virtual size: 175KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.jBANt
Size: 1KB - Virtual size: 131KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.w
Size: 4KB - Virtual size: 453KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 275KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.M
Size: 122KB - Virtual size: 174KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.iHQMi
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8f0bbabc37d1eac880aa203344dbf296

Headers

File Characteristics

Imports

ws2_32

urlmon

kernel32

advapi32

ole32

user32

quartz

browseui

Sections

.text Size: 17KB - Virtual size: 16KB

.l Size: 1024B - Virtual size: 200KB

.Mz Size: 5KB - Virtual size: 574KB

.dCisa Size: 1KB - Virtual size: 193KB

.rdata Size: 2KB - Virtual size: 8KB

.chhYG Size: 4KB - Virtual size: 81KB

.vR Size: 4KB - Virtual size: 321KB

.u Size: 98KB - Virtual size: 175KB

.jBANt Size: 1KB - Virtual size: 131KB

.w Size: 4KB - Virtual size: 453KB

.data Size: 6KB - Virtual size: 275KB

.M Size: 122KB - Virtual size: 174KB

.iHQMi Size: 2KB - Virtual size: 4KB

.rsrc Size: 2KB - Virtual size: 2KB

.text
Size: 17KB - Virtual size: 16KB

.l
Size: 1024B - Virtual size: 200KB

.Mz
Size: 5KB - Virtual size: 574KB

.dCisa
Size: 1KB - Virtual size: 193KB

.rdata
Size: 2KB - Virtual size: 8KB

.chhYG
Size: 4KB - Virtual size: 81KB

.vR
Size: 4KB - Virtual size: 321KB

.u
Size: 98KB - Virtual size: 175KB

.jBANt
Size: 1KB - Virtual size: 131KB

.w
Size: 4KB - Virtual size: 453KB

.data
Size: 6KB - Virtual size: 275KB

.M
Size: 122KB - Virtual size: 174KB

.iHQMi
Size: 2KB - Virtual size: 4KB

.rsrc
Size: 2KB - Virtual size: 2KB