2e8a63a935822684bc3538a61749d9d2_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

2e8a63a935822684bc3538a61749d9d2_JaffaCakes118
Size

92KB
MD5

2e8a63a935822684bc3538a61749d9d2
SHA1

f76afcfba1f52fb8eb3e9c217d4a073117ee110a
SHA256

7ac2375c6569ad1f8e25ee7fc4a4ebcb0425bbd5ab19c2844f1580a8e0fcab76
SHA512

dcf63037bd7389900bddb1ec87168183d6ea6ff569ecb88e7fd52fe5a4d6c535931ea86b83d5e8300476e8b10677f3545b2e2eefe6df5ce877cfaade4e7444b0
SSDEEP

1536:9IZA9t9Q9xnPrJboarARh77a8sPJpL7ksTWKHfR:sWgDDJsaW9+8sPr/9WKH5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2e8a63a935822684bc3538a61749d9d2_JaffaCakes118

Files

2e8a63a935822684bc3538a61749d9d2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6460148b09f6379ba9857e191fc8b73d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA

ws2_32

WSAStartup
gethostname
inet_ntoa
gethostbyname

mpr

WNetAddConnection2A

kernel32

LCMapStringW
GetProcAddress
GetModuleHandleA
CloseHandle
TerminateProcess
GetLastError
OpenProcess
SetLastError
Sleep
GetTickCount
CreateFileA
FreeLibrary
LocalFree
WriteFile
GetStdHandle
FormatMessageA
LoadLibraryExA
FlushFileBuffers
SizeofResource
LoadResource
FindResourceA
DeleteFileA
GetSystemDirectoryA
GetComputerNameA
GetCurrentProcess
WideCharToMultiByte
GetUserDefaultLangID
GetModuleFileNameA
ReadFile
GetFullPathNameA
GetCommandLineA
GetVersion
GetStringTypeA
SetEndOfFile
GetStringTypeW
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetFilePointer
SetStdHandle
LoadLibraryA
LockResource
HeapFree
HeapAlloc
ReadConsoleInputA
SetConsoleMode
GetConsoleMode
RtlUnwind
ExitProcess
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
SetHandleCount
GetFileType
GetStartupInfoA
GetCPInfo
GetACP
GetOEMCP
MultiByteToWideChar
LCMapStringA

advapi32

CreateServiceA
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
DeleteService
ControlService
OpenSCManagerA
OpenServiceA
StartServiceA
QueryServiceStatus
CloseServiceHandle

Sections

.text
Size: 32KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 36KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6460148b09f6379ba9857e191fc8b73d

Headers

File Characteristics

Imports

version

ws2_32

mpr

kernel32

advapi32

Sections

.text Size: 32KB - Virtual size: 28KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 16KB - Virtual size: 19KB

.rsrc Size: 36KB - Virtual size: 33KB

.text
Size: 32KB - Virtual size: 28KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 16KB - Virtual size: 19KB

.rsrc
Size: 36KB - Virtual size: 33KB