2d3723d1637c5051e99a4ade3011967b_JaffaCakes118

General

Target

2d3723d1637c5051e99a4ade3011967b_JaffaCakes118
Size

19KB
MD5

2d3723d1637c5051e99a4ade3011967b
SHA1

26db2c7fa63a0c0ca2e08bc9e509c0c03732319a
SHA256

718049a5c7d547c24bb52125f2226bb2802b8630fc4c2ea518fc965a1204cf99
SHA512

9883e6671fa7eb35eaa237d89359e09fbb4ad0bb4fccaeef8f07a4ebf56844fd112bbc46536180350b23ba6e8a903063a5686fc221b553648bc960e25751c71f
SSDEEP

384:sJYYqEL2V61JBWQGeqnJMS/1J87x3G40Ek1pD:9YRSiJ9GZMKg7xCL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2d3723d1637c5051e99a4ade3011967b_JaffaCakes118

Files

2d3723d1637c5051e99a4ade3011967b_JaffaCakes118
.exe windows:5 windows x86 arch:x86

2a74c8421dd7b201995121e3d8686ba9

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
Process32FirstW
LockResource
Process32NextW
lstrcmpiW
lstrcatW
GetTempPathW
CloseHandle
DeleteFileW
GetCurrentProcessId
lstrcpyW
GetModuleHandleA
lstrlenW
CreateFileW
GetStartupInfoA
TerminateProcess
SizeofResource
GetSystemDirectoryW
OpenProcess
WriteFile
CreateDirectoryW
CreateProcessW
LoadResource
CreateToolhelp32Snapshot
FindResourceW

msvcrt

_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
_XcptFilter
_exit
malloc
exit
memset

advapi32

CreateServiceW
DeleteService
OpenSCManagerW
OpenServiceW
StartServiceW
RegDeleteValueW
RegOpenKeyExW
ControlService
RegCloseKey
RegSetValueExW
CloseServiceHandle

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 172B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 440B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2a74c8421dd7b201995121e3d8686ba9

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

msvcrt

advapi32

Sections

.text Size: 2KB - Virtual size: 2KB

.rdata Size: 1KB - Virtual size: 1KB

.data Size: 512B - Virtual size: 172B

.rsrc Size: 13KB - Virtual size: 12KB

.reloc Size: 512B - Virtual size: 440B

.text
Size: 2KB - Virtual size: 2KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 512B - Virtual size: 172B

.rsrc
Size: 13KB - Virtual size: 12KB

.reloc
Size: 512B - Virtual size: 440B