064e060f78c1ae4d9a58d8a4f12e07d2_JaffaCakes118

General

Target

064e060f78c1ae4d9a58d8a4f12e07d2_JaffaCakes118
Size

19KB
MD5

064e060f78c1ae4d9a58d8a4f12e07d2
SHA1

b39cb1b3c037694f144a8a3d20fe0c55b0456da8
SHA256

21102d8b793315c020efbb1760b8a8f48aa27332d5cf7b2aae252843340bcc9a
SHA512

c191f813993216c6942bce7acbaf08602c5e6a34f7ca0a952d5bce55f601d04943321cb0f6328f67ae4e8a8f13c9874683dcabbd1e683f4c69b0b38be206049a
SSDEEP

192:tUA+WB57WFWdCTPO0rc5xUhOYHAQ/mrdy1XoH:t2WBxWFJjrcLvYgQ/mrdiXoH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
064e060f78c1ae4d9a58d8a4f12e07d2_JaffaCakes118

Files

064e060f78c1ae4d9a58d8a4f12e07d2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8b021bb6abf4cf63ef1887f16ce592ec

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcr71

_controlfp
_onexit
__dllonexit
?terminate@@YAXXZ
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_amsg_exit
_acmdln
exit
_cexit
_ismbblead
_XcptFilter
_exit
_c_exit
??1type_info@@UAE@XZ
_except_handler3
__security_error_handler
strstr
??3@YAXPAX@Z
_CxxThrowException
__CxxFrameHandler
strncpy
strncat
strlen
strchr
memcpy
??2@YAPAXI@Z
strcat
memset

kernel32

GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetStartupInfoA
GetModuleHandleA
GetCommandLineA
CreateMutexA
ReleaseMutex
SetUnhandledExceptionFilter
GetModuleFileNameA
GetFileAttributesA
GetLastError
SetLastError
lstrcmpiA
lstrlenA
lstrcpyA
GetTempPathA
lstrcatA
FindResourceA
LoadResource
SystemTimeToFileTime
ExitProcess
CloseHandle
SetFileTime
FindClose
CreateFileA
FindFirstFileA
DeleteFileA
LocalFileTimeToFileTime
WriteFile
SizeofResource
MoveFileA

user32

wsprintfA

advapi32

StartServiceA
OpenSCManagerA
CreateServiceA
CloseServiceHandle
RegCreateKeyA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegSetValueExA
OpenServiceA

shell32

SHGetFolderPathA

Sections

.text
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 128B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 68KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8b021bb6abf4cf63ef1887f16ce592ec

Headers

File Characteristics

Imports

msvcr71

kernel32

user32

advapi32

shell32

Sections

.text Size: 8KB - Virtual size: 4KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 4KB - Virtual size: 128B

.rsrc Size: 68KB - Virtual size: 65KB

.text
Size: 8KB - Virtual size: 4KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 4KB - Virtual size: 128B

.rsrc
Size: 68KB - Virtual size: 65KB