04ce7c182b1aa7c4d48f155d2606128a_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

04ce7c182b1aa7c4d48f155d2606128a_JaffaCakes118
Size

28KB
MD5

04ce7c182b1aa7c4d48f155d2606128a
SHA1

0b719d9284606e80f98f64057e6cfe63b1427de0
SHA256

79ee407714725be962b3aab7a92b9fec31aefde5f41a28e4227f9d3f914c04bb
SHA512

2f63a20a8f1e1199604c4c9cfe60dd9c203a6828177e9013c1e85ba241fda3342fdd1322dbb581027389d7190d5df05d541b9917fee3beb488c293d68829ed75
SSDEEP

384:UumVicDRp9Ew9ElP9yHXDuamceXZpVbWt2X4OZZIl:BvcREUElVyPmcK5Wt2oO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
04ce7c182b1aa7c4d48f155d2606128a_JaffaCakes118

Files

04ce7c182b1aa7c4d48f155d2606128a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d559c5db3dac75956f13403bbd9729f3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA
GetModuleHandleA
GetVersionExA
GetWindowsDirectoryA
WaitForSingleObject
DeleteFileA
GetFileAttributesA
SetFileAttributesA
MultiByteToWideChar
GetSystemDirectoryA
GetTempPathA
GetModuleFileNameA
GetShortPathNameA
CopyFileA
lstrlenA
WinExec

advapi32

SetNamedSecurityInfoA
OpenSCManagerA
OpenServiceA
DeleteService
CloseServiceHandle
RegEnumKeyExA
RegQueryValueExA
RegDeleteValueA
RegOpenKeyExA
RegCreateKeyExA
RegSetValueExA
RegCloseKey
InitializeAcl
AllocateAndInitializeSid
AddAccessAllowedAce

shell32

ShellExecuteExA

ole32

CoCreateInstance
CoInitialize
CoUninitialize

mfc42

ord1575
ord5710
ord2781
ord4058
ord3181
ord561
ord815
ord540
ord800
ord941
ord535
ord5572
ord2818
ord860
ord858
ord2764
ord2915
ord926
ord939
ord537
ord798
ord6392
ord5778
ord1997
ord6407
ord5194
ord533
ord922
ord924
ord4277
ord4129
ord5683
ord668
ord2770
ord356
ord4204
ord1980

msvcrt

time
rand
_mbscmp
__dllonexit
_onexit
_exit
srand
exit
__p___initenv
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
__CxxFrameHandler
_XcptFilter

msvcp60

?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@PBD@Z
?endl@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z
??1_Winit@std@@QAE@XZ
??0_Winit@std@@QAE@XZ
??0Init@ios_base@std@@QAE@XZ
??1Init@ios_base@std@@QAE@XZ

Sections

.text
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d559c5db3dac75956f13403bbd9729f3

Headers

File Characteristics

Imports

kernel32

advapi32

shell32

ole32

mfc42

msvcrt

msvcp60

Sections

.text Size: 12KB - Virtual size: 10KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 4KB - Virtual size: 4KB

.rsrc Size: 4KB - Virtual size: 160B

.text
Size: 12KB - Virtual size: 10KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 4KB - Virtual size: 4KB

.rsrc
Size: 4KB - Virtual size: 160B