2e6aac19af45185d789fd1ffc857b6f3_JaffaCakes118

General

Target

2e6aac19af45185d789fd1ffc857b6f3_JaffaCakes118
Size

22KB
MD5

2e6aac19af45185d789fd1ffc857b6f3
SHA1

1f35de7a27aafc79e7342f86e911971fef83c063
SHA256

0f676aaf9bfaa827d791345a8141c042c3ea96f48e4cbb64e37b56838aaa6b6c
SHA512

4144f2704ee8c359a6cdc62a1dcb7657ec3dfec195b143c6df1e2222cd5f0402a89216010f00eafc971ace426ec95369d2151b487338d1df177d489fb895b9a4
SSDEEP

384:HYLQemjSCk8gcQHCZZ9kYCpBYA8HZ0fypqW0V/kBYKudmfgE3MS1Vl48:4TCk8UHCZXcdV/SudmfZ3MGH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2e6aac19af45185d789fd1ffc857b6f3_JaffaCakes118

Files

2e6aac19af45185d789fd1ffc857b6f3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a9e35c46170f40ae011924d37c19836d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcmpA
lstrcpyA
lstrcatA
GetStartupInfoA
SetUnhandledExceptionFilter
CopyFileA
ResetEvent
GetCommandLineA
GetModuleFileNameA
GetCurrentDirectoryA
HeapReAlloc
InitializeCriticalSection
LeaveCriticalSection
RaiseException
EnterCriticalSection
DeleteCriticalSection
lstrlenA
HeapAlloc
HeapFree
WaitForSingleObject
ResumeThread
TerminateProcess
CreateProcessA
ExitProcess
CloseHandle
CreateEventA
Sleep
GetProcessHeap
GetTickCount
SetEvent
GetLastError
CreateThread

shell32

SHGetFolderPathA

advapi32

RegQueryValueExA
RegCreateKeyExA
RegSetValueExA
CreateServiceA
RegisterServiceCtrlHandlerA
OpenSCManagerA
SetServiceStatus
StartServiceCtrlDispatcherA
CloseServiceHandle
RegCloseKey

ws2_32

closesocket
__WSAFDIsSet
inet_addr
inet_ntoa
socket
select
ioctlsocket
WSACleanup
WSAStartup
WSAGetLastError
htons
getsockname
send
shutdown
recv
connect

shlwapi

StrStrA
PathFindFileNameA
StrStrIA

dnsapi

DnsRecordListFree
DnsQuery_A

Sections

.text
Size: 16KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 81B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a9e35c46170f40ae011924d37c19836d

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

shell32

advapi32

ws2_32

shlwapi

dnsapi

Sections

.text Size: 16KB - Virtual size: 20KB

.data Size: 81B - Virtual size: 4KB

.rsrc Size: 4KB - Virtual size: 16B

.text
Size: 16KB - Virtual size: 20KB

.data
Size: 81B - Virtual size: 4KB

.rsrc
Size: 4KB - Virtual size: 16B