0bb8f6320eb583286e7fffce6d9e096d_JaffaCakes118

General

Target

0bb8f6320eb583286e7fffce6d9e096d_JaffaCakes118
Size

128KB
MD5

0bb8f6320eb583286e7fffce6d9e096d
SHA1

9bd35733f50a86689fdbadffb40fc851f6d991f4
SHA256

91c28040e7c5ed7bb9da29f637d328cf9981638cd678a190059acac13d3a7a26
SHA512

2cb35dfe62e4d44ed14ef9f643d3dcd1aa682cd8fc1de3c31dfc417efa32de518ed06f822df378b18e180f13eeb085b95fde9f5e1da0711ada47a1df757a8951
SSDEEP

3072:nhf13XzxDvJ9JUljSnD7UZxX3dUPm+N4dEw:nfzlejSnD7Ubyufew

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0bb8f6320eb583286e7fffce6d9e096d_JaffaCakes118

Files

0bb8f6320eb583286e7fffce6d9e096d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

125eea9ba3e2ebf2ea0c7639deed5cc9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileA
GetSystemDirectoryA
SetFileTime
GetFileAttributesExA
WinExec
GetModuleFileNameA
Sleep
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
GetStartupInfoA
GetModuleHandleA
CloseHandle
GetVersionExA
LoadLibraryA
GetProcAddress
GetLastError

user32

CreateWindowExA
DefWindowProcA
GetMessageA
ShowWindow
PostQuitMessage
TranslateMessage
RegisterClassExA
DispatchMessageA
GetDesktopWindow

advapi32

RegOpenKeyExA
ConvertSidToStringSidA
OpenServiceA
StartServiceA
CloseServiceHandle
GetUserNameA
DeleteService
RegCloseKey
RegQueryValueExA
OpenSCManagerA
CreateServiceA
LookupAccountNameA

msvcrt

__getmainargs
_strlwr
_controlfp
__set_app_type
__p__fmode
sprintf
_except_handler3
rand
??3@YAXPAX@Z
??2@YAPAXI@Z
strstr
_access
srand
time
fclose
fflush
fwrite
fopen
_exit
_XcptFilter
exit
_acmdln
_stricmp
_initterm
__setusermatherr
_adjust_fdiv
__p__commode

shlwapi

StrStrA
SHSetValueA
SHDeleteKeyA

dbghelp

ImageNtHeader

version

GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA

Sections

.text
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 100KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

125eea9ba3e2ebf2ea0c7639deed5cc9

Headers

File Characteristics

Imports

kernel32

user32

advapi32

msvcrt

shlwapi

dbghelp

version

Sections

.text Size: 16KB - Virtual size: 14KB

.rdata Size: 4KB - Virtual size: 1KB

.data Size: 100KB - Virtual size: 96KB

.rsrc Size: 4KB - Virtual size: 1KB

.text
Size: 16KB - Virtual size: 14KB

.rdata
Size: 4KB - Virtual size: 1KB

.data
Size: 100KB - Virtual size: 96KB

.rsrc
Size: 4KB - Virtual size: 1KB