257cc6be73001987587a7a8a24b75733_JaffaCakes118

General

Target

257cc6be73001987587a7a8a24b75733_JaffaCakes118
Size

55KB
MD5

257cc6be73001987587a7a8a24b75733
SHA1

cadadbb8218bb6a5f41ca8eea33e9dbdc8d31901
SHA256

d598430fad2737919cea1ae073ec510c2412de4f061ba6cbfa050a05aaf3a217
SHA512

a6bc5f40f73aa3b444d878b44b6324be04f8c60a649f4bc5b8b4cf20646c37f5f402d3401e82f9936d3ac10b8a9090fcc486431407d7c53b74f88163693316f1
SSDEEP

768:c2GmBAdEWaqIUtgeVQUwuRoYhwdU7QFVDousJeK3e9LswKT:ymJUtHQWE7ou0u9Hm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
257cc6be73001987587a7a8a24b75733_JaffaCakes118

Files

257cc6be73001987587a7a8a24b75733_JaffaCakes118
.exe windows:4 windows x86 arch:x86

63621a4a295fc48fc3336fc5283a4719

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadResource
FindResourceA
GetModuleHandleA
DeleteFileA
GetSystemDirectoryA
GetPrivateProfileStringA
LockResource
WaitForSingleObject
CreateEventA
SetEvent
GetStringTypeW
GetStringTypeA
SizeofResource
CreateFileA
SetFilePointer
WriteFile
lstrcmpiA
Module32First
Module32Next
CreateToolhelp32Snapshot
Process32First
Process32Next
CloseHandle
GetCurrentThreadId
GetModuleFileNameA
Sleep
LCMapStringW
LCMapStringA
GetLastError
GetFileAttributesA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
HeapAlloc
GetCPInfo
GetACP
GetOEMCP
VirtualAlloc
HeapReAlloc
GetProcAddress
LoadLibraryA
SetStdHandle
MultiByteToWideChar
FlushFileBuffers

user32

PostThreadMessageA

advapi32

StartServiceA
RegisterEventSourceA
ReportEventA
DeregisterEventSource
ControlService
DeleteService
CreateServiceA
OpenSCManagerA
OpenServiceA
CloseServiceHandle
RegisterServiceCtrlHandlerA
SetServiceStatus
StartServiceCtrlDispatcherA
QueryServiceStatus

shell32

ShellExecuteA

Sections

.text
Size: 24KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 124KB - Virtual size: 120KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

63621a4a295fc48fc3336fc5283a4719

Headers

File Characteristics

Imports

kernel32

user32

advapi32

shell32

Sections

.text Size: 24KB - Virtual size: 21KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 12KB - Virtual size: 15KB

.rsrc Size: 124KB - Virtual size: 120KB

.text
Size: 24KB - Virtual size: 21KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 12KB - Virtual size: 15KB

.rsrc
Size: 124KB - Virtual size: 120KB