3c85ca7a083e73d56db737a59b47e48e_JaffaCakes118

General

Target

3c85ca7a083e73d56db737a59b47e48e_JaffaCakes118
Size

176KB
MD5

3c85ca7a083e73d56db737a59b47e48e
SHA1

ed31bc42742657d67b5a0a2695802383cfbd0568
SHA256

ecc43e444630bc86e921ad5fcc83e11548cd738a44d59acb9b5e7335f0135c3d
SHA512

78227d6ec77df106257da9ba84422fc523c34baab1fc7360858ec84d288ae4558d02da2bee19d86613a75b51d719b8137d1d679b5cf9eb0309a6517b95db5488
SSDEEP

3072:E23+BWwDXDYLbAoliVLY+49OykNxBGhz3sXKxC/hHhKMeBFpPFyWn:B9wDXELb3luLYv3gA3SpjeBvPFyc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3c85ca7a083e73d56db737a59b47e48e_JaffaCakes118

Files

3c85ca7a083e73d56db737a59b47e48e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

dfbcefe0f053f75de89e3a593dc15e34

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

SHGetSpecialFolderPathA

shlwapi

StrStrIA
SHSetValueA
SHEnumValueA
SHGetValueA
SHEnumKeyExA

advapi32

CreateServiceA
CryptAcquireContextA
OpenSCManagerA
DeleteService
OpenServiceA
StartServiceA
RegCloseKey
RegSetValueExA
RegCreateKeyExA
RegOpenKeyExA
CryptReleaseContext
CryptGenRandom
CloseServiceHandle

user32

wsprintfA

rpcrt4

UuidToStringA

ole32

CoInitialize
CoCreateGuid
CoCreateInstance

imagehlp

ImageNtHeader

kernel32

GetLastError
ExitProcess
GetVersionExA
GetLocalTime
SleepEx
FindFirstFileA
GetFileAttributesA
GetPrivateProfileStringA
FindNextFileA
WideCharToMultiByte
GetModuleHandleA
GetStartupInfoA
GetSystemDirectoryA
lstrlenA
CloseHandle
SetFileTime
CreateFileA
GetFileAttributesExA

msvcrt

exit
_acmdln
__getmainargs
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_initterm
fclose
fwrite
fopen
strlen
sprintf
printf
strcat
strcpy
memset
memcpy
rand
tolower
memcmp
free
malloc
isalpha
islower
wctomb
__mb_cur_max
isalnum
time
isxdigit
isspace
isgraph
isupper
strerror
ispunct
??2@YAPAXI@Z
strncpy
wcscpy
mbstowcs
srand
atoi
_exit
_XcptFilter

Sections

.text
Size: 48KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 104KB - Virtual size: 102KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

dfbcefe0f053f75de89e3a593dc15e34

Headers

File Characteristics

Imports

shell32

shlwapi

advapi32

user32

rpcrt4

ole32

imagehlp

kernel32

msvcrt

Sections

.text Size: 48KB - Virtual size: 44KB

.rdata Size: 20KB - Virtual size: 16KB

.data Size: 104KB - Virtual size: 102KB

.text
Size: 48KB - Virtual size: 44KB

.rdata
Size: 20KB - Virtual size: 16KB

.data
Size: 104KB - Virtual size: 102KB