085912829f0f4b7d39050cc56d985bfe_JaffaCakes118

General

Target

085912829f0f4b7d39050cc56d985bfe_JaffaCakes118
Size

76KB
MD5

085912829f0f4b7d39050cc56d985bfe
SHA1

27a7e8db858c8992bbca086552690bfc61cec878
SHA256

498f04c3f0d5da27256b4d8c61ad29ea9e27fad9879d66ddb169ab6b743931bd
SHA512

7f5d01d3d262759843f83da2f5139af24041aad36d636ca65be0ebbfad880b1d3a9b2559625ec93da2438385d445b3346a0c3c3d668628934f681b37b6b175bf
SSDEEP

1536:OlBPiPtj2S1oOoetLyUlHaL/Ty1B8WTjVxXCr+L0nWXAcI1boOShm85:iBag/OoetGUoL/O1B8WTjV01boL1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
085912829f0f4b7d39050cc56d985bfe_JaffaCakes118

Files

085912829f0f4b7d39050cc56d985bfe_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2b897e97c66bad05af6602dc2f1827b6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemDirectoryA
GetModuleFileNameA
CreateProcessA
GetCurrentDirectoryA
Sleep
ResumeThread
SetThreadPriority
CopyFileA
SetPriorityClass
GetCurrentProcess
lstrcatA
lstrcpyA
GetEnvironmentVariableA
GetShortPathNameA
GetLastError
lstrlenA
FindResourceA
SizeofResource
LoadResource
LockResource
FreeResource
OpenProcess
VirtualAllocEx
WriteProcessMemory
GetModuleHandleA
GetProcAddress
GetCurrentThread
CreateRemoteThread
RtlUnwind
ExitProcess
TerminateProcess
GetStartupInfoA
GetCommandLineA
GetVersion
HeapFree
CloseHandle
WriteFile
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapAlloc
VirtualAlloc
HeapReAlloc
SetStdHandle
FlushFileBuffers
SetFilePointer
CreateFileA
GetCPInfo
GetACP
GetOEMCP
LoadLibraryA
SetEndOfFile
ReadFile
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW

advapi32

RegisterServiceCtrlHandlerA
SetServiceStatus
RegOpenKeyExA
RegQueryValueExA
OpenSCManagerA
CreateServiceA
OpenServiceA
StartServiceA
RegOpenKeyA
RegSetValueExA
CloseServiceHandle
RegCloseKey
StartServiceCtrlDispatcherA

Sections

.text
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 51KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2b897e97c66bad05af6602dc2f1827b6

Headers

File Characteristics

Imports

kernel32

advapi32

Sections

.text Size: 21KB - Virtual size: 20KB

.rdata Size: 3KB - Virtual size: 3KB

.data Size: 11KB - Virtual size: 15KB

.rsrc Size: 51KB - Virtual size: 50KB

.text
Size: 21KB - Virtual size: 20KB

.rdata
Size: 3KB - Virtual size: 3KB

.data
Size: 11KB - Virtual size: 15KB

.rsrc
Size: 51KB - Virtual size: 50KB