f56491658aebff6cfe0e08c9d842ac46_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

f56491658aebff6cfe0e08c9d842ac46_JaffaCakes118
Size

240KB
MD5

f56491658aebff6cfe0e08c9d842ac46
SHA1

fac793582d1d661e5b904ed025afdb19f9067514
SHA256

7ce0a178759a8da3bbb895558c19923d29640ff62ff8eb8377023a25ba485b56
SHA512

1f16a311a33664a0703b50b41b4efa84c12a808fde6435ab9bec241ef990ce30b30b0c24e2e1a99b5762a88f115917364ac417fd22e01e182e7fe2dd82c03535
SSDEEP

3072:NbkWf1ZQ1qteltVie0pTKttNQNf9VL9jhNPa/0vvzaCbrGUPdEdJ:NV36Vl36Kh6VpPaMnhbrY/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f56491658aebff6cfe0e08c9d842ac46_JaffaCakes118

Files

f56491658aebff6cfe0e08c9d842ac46_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e96c4bed2e87ac488cc029ff034f5a04

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetShortPathNameA
GetModuleFileNameA
CreateThread
GetTempPathA
lstrlenA
GetEnvironmentVariableA
CopyFileA
GetSystemDirectoryA
CompareStringW
CompareStringA
lstrcpyA
GetCurrentProcess
SetPriorityClass
GetCurrentThread
SetThreadPriority
CreateProcessA
ResumeThread
CreateFileA
GetFileSize
ReadFile
CloseHandle
FindFirstFileA
HeapAlloc
WriteFile
FindClose
Sleep
GetTickCount
lstrcatA
FreeLibrary
HeapFree
IsBadReadPtr
LoadLibraryA
GetProcAddress
VirtualFree
VirtualProtect
VirtualAlloc
GetProcessHeap
GetLastError
HeapReAlloc
RtlUnwind
ExitProcess
TerminateProcess
GetTimeZoneInformation
GetSystemTime
GetLocalTime
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
GetVersionExA
HeapDestroy
HeapCreate
WideCharToMultiByte
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetCPInfo
GetACP
GetOEMCP
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
SetEnvironmentVariableA

user32

wsprintfA

advapi32

RegQueryValueExA
OpenSCManagerA
CreateServiceA
OpenServiceA
StartServiceA
RegOpenKeyA
CloseServiceHandle
StartServiceCtrlDispatcherA
RegisterServiceCtrlHandlerA
SetServiceStatus
RegCreateKeyA
RegSetValueExA
RegEnumKeyExA
RegEnumValueA
RegOpenKeyExA
RegCloseKey

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 96KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 108KB - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

e96c4bed2e87ac488cc029ff034f5a04

Headers

File Characteristics

Imports

kernel32

user32

advapi32

Sections

.text Size: 28KB - Virtual size: 27KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 96KB - Virtual size: 96KB

.rsrc Size: 108KB - Virtual size: 108KB

.text
Size: 28KB - Virtual size: 27KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 96KB - Virtual size: 96KB

.rsrc
Size: 108KB - Virtual size: 108KB