1c61c5e72d7a5837cd76296721affcb4_JaffaCakes118

General

Target

1c61c5e72d7a5837cd76296721affcb4_JaffaCakes118
Size

176KB
MD5

1c61c5e72d7a5837cd76296721affcb4
SHA1

3daacdeeab5332cdf0dba1ab92eb76d9a98b51a2
SHA256

2257383576926e535613f9a11ec7003333df55dc857a80d949dcf4e5695165bc
SHA512

9d382843953765eee95a0958387e3095fb7871386ada52b3db1789c4013ffc0fd7722e719b90481a88a2da0e405261b895899e43bf2ff9e957899ac7eb87897f
SSDEEP

3072:A8BoOscNp0TiO/YM0KiEe36g9Daeo2fESM5WpBh5nXyG:acf0TiO/YHpE/g9DM2ftM4p35n

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1c61c5e72d7a5837cd76296721affcb4_JaffaCakes118

Files

1c61c5e72d7a5837cd76296721affcb4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0ceecc9f6b0e5d4e138a506085f1faef

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

CoCreateGuid
CoInitialize
CoCreateInstance

rpcrt4

UuidToStringA

shlwapi

SHEnumKeyExA
SHGetValueA
SHEnumValueA
StrStrIA
SHSetValueA

advapi32

RegSetValueExA
OpenServiceA
CryptAcquireContextA
CryptGenRandom
CryptReleaseContext
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey
OpenSCManagerA
DeleteService
CloseServiceHandle
CreateServiceA
StartServiceA

user32

wsprintfA

shell32

SHGetSpecialFolderPathA

msvcrt

free
fclose
fwrite
fopen
strlen
sprintf
memset
islower
??2@YAPAXI@Z
isupper
isgraph
ispunct
isxdigit
printf
wctomb
__mb_cur_max
tolower
time
strncpy
wcscpy
mbstowcs
srand
atoi
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
memcpy
memcmp
isalnum
isalpha
isspace
rand
malloc
strcpy
strcat
strerror

imagehlp

ImageNtHeader

kernel32

WideCharToMultiByte
FindNextFileA
GetPrivateProfileStringA
GetFileAttributesA
FindFirstFileA
ExitProcess
GetVersionExA
GetLocalTime
SleepEx
GetModuleHandleA
lstrlenA
GetLastError
GetSystemDirectoryA
GetFileAttributesExA
CreateFileA
SetFileTime
CloseHandle
GetStartupInfoA

Sections

.text
Size: 48KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 104KB - Virtual size: 103KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

0ceecc9f6b0e5d4e138a506085f1faef

Headers

File Characteristics

Imports

ole32

rpcrt4

shlwapi

advapi32

user32

shell32

msvcrt

imagehlp

kernel32

Sections

.text Size: 48KB - Virtual size: 44KB

.rdata Size: 20KB - Virtual size: 19KB

.data Size: 104KB - Virtual size: 103KB

.text
Size: 48KB - Virtual size: 44KB

.rdata
Size: 20KB - Virtual size: 19KB

.data
Size: 104KB - Virtual size: 103KB