34614a4ddfb5522fb1da1b20d75db54b_JaffaCakes118

General

Target

34614a4ddfb5522fb1da1b20d75db54b_JaffaCakes118
Size

136KB
MD5

34614a4ddfb5522fb1da1b20d75db54b
SHA1

404ad872c21694276c22baf872bf322a9c742e32
SHA256

9c2d4e397b49f6a689071c63ddc81f6dda5bbfe672a29072b8bf28ed3264bd9a
SHA512

f9538a49623b9d38f891423182e323de8850985a6f3e19f272477c4fd6e0e2505ea62a57b4892762441b0f43df68359b600b7d52c6575b0bd76ca3f0b26362c6
SSDEEP

1536:aauZ+M2BSliQ7MKSXN9S4A3XmlovSQRpP8UiR8XjBaW6I1+ju0CH4WcJlObFXeEF:N8nnYlov78U+8XjYWbBHFF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
34614a4ddfb5522fb1da1b20d75db54b_JaffaCakes118

Files

34614a4ddfb5522fb1da1b20d75db54b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3366fc7ff607cd9be211ae54aeb0e495

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileA
GetWindowsDirectoryA
WaitForSingleObject
CreateThread
FreeResource
SizeofResource
LockResource
WriteFile
FindResourceExA
GetModuleHandleA
HeapAlloc
GetProcessHeap
HeapFree
HeapReAlloc
HeapSize
CloseHandle
FreeLibrary
LoadLibraryA
GetProcAddress
ExitProcess
LoadResource
Sleep
VirtualProtect
GetLocaleInfoA
RtlUnwind
RaiseException
GetStartupInfoA
GetCommandLineA
GetVersionExA
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
SetUnhandledExceptionFilter
TerminateProcess
GetCurrentProcess
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
InterlockedExchange
VirtualQuery
IsBadReadPtr
IsBadCodePtr
GetACP
GetOEMCP
GetCPInfo
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
GetSystemInfo

advapi32

OpenSCManagerA
OpenServiceA
ControlService
DeleteService
CloseServiceHandle
EnumServicesStatusA

shell32

SHGetFolderPathA

Sections

.text
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 87KB - Virtual size: 86KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3366fc7ff607cd9be211ae54aeb0e495

Headers

File Characteristics

Imports

kernel32

advapi32

shell32

Sections

.text Size: 26KB - Virtual size: 25KB

.rdata Size: 20KB - Virtual size: 20KB

.data Size: 2KB - Virtual size: 3KB

.rsrc Size: 87KB - Virtual size: 86KB

.text
Size: 26KB - Virtual size: 25KB

.rdata
Size: 20KB - Virtual size: 20KB

.data
Size: 2KB - Virtual size: 3KB

.rsrc
Size: 87KB - Virtual size: 86KB