3482f548ae013e2c6953026b3e433dd1_JaffaCakes118

General

Target

3482f548ae013e2c6953026b3e433dd1_JaffaCakes118
Size

125KB
MD5

3482f548ae013e2c6953026b3e433dd1
SHA1

07db5784a467c61154879904db9c7b302ae4129a
SHA256

3c91d5e67ef45b7f9ca616d2d5db436a4a3852d1de5400c4a5ebb377bb14e037
SHA512

3234aa9acb00c8caf92d9feee091ada1b60a999050b8af1124d4a9c25543cf20db9b5adc668387c86530f997ae2f3f2c0efe3271c09f5cc22cbb9e9de62d03a6
SSDEEP

3072:4+fab+1DfGpw7KhrPgVUTe3K5rv/oR0OFjsurLfLVMFEBFeX+R9o:4+fJSg26a5r3OJsAxMF0gX+RG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3482f548ae013e2c6953026b3e433dd1_JaffaCakes118

Files

3482f548ae013e2c6953026b3e433dd1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6cdafea934ff4ec7fcf459c9e1cd3842

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA
GetCurrentThreadId
OutputDebugStringA
GetFileTime
lstrcatA
WritePrivateProfileStringA
DeleteFileA
FreeResource
lstrlenA
CreateMutexA
SetFileTime
LocalFileTimeToFileTime
GetTempPathA
GetFileAttributesA
lstrcmpA
SetLastError
LocalReAlloc
LocalFree
LocalAlloc
GetLastError
ReleaseMutex
GetModuleFileNameA
CreateFileA
SetFilePointer
ReadFile
Sleep
GetSystemDirectoryA
CopyFileA
GetVersion
LoadLibraryA
GetProcAddress
FreeLibrary
CreateRemoteThread
WaitForSingleObject
OpenProcess
CreateToolhelp32Snapshot
Process32First
Process32Next
GetCurrentProcess
CloseHandle
WriteFile
GetTickCount

user32

wsprintfA
GetInputState
PostThreadMessageA
GetMessageA
MessageBoxA

advapi32

OpenServiceA
CloseServiceHandle
StartServiceA
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
RegQueryValueExA
RegSetValueExA
RegCloseKey
RegOpenKeyExA
RegCreateKeyExA
CreateServiceA
EnumServicesStatusA
QueryServiceConfigA
UnlockServiceDatabase
ChangeServiceConfigA
LockServiceDatabase
OpenSCManagerA

msvcrt

_strlwr
__dllonexit
_onexit
??1type_info@@UAE@XZ
__CxxFrameHandler
??3@YAXPAX@Z
rand
realloc
malloc
strncmp
strtoul
isdigit
rename
sprintf
??2@YAPAXI@Z
strchr
strstr
fclose
fread
fseek
fopen
exit

Sections

.data
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

6cdafea934ff4ec7fcf459c9e1cd3842

Headers

File Characteristics

Imports

kernel32

user32

advapi32

msvcrt

Sections

.data Size: 12KB - Virtual size: 12KB

.CRT Size: 512B - Virtual size: 4B

.data
Size: 12KB - Virtual size: 12KB

.CRT
Size: 512B - Virtual size: 4B