3d1b42cfb16558df5bacb002aa2461bb_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

3d1b42cfb16558df5bacb002aa2461bb_JaffaCakes118
Size

192KB
MD5

3d1b42cfb16558df5bacb002aa2461bb
SHA1

33ba02e00939f57f485e30c14584369c7b727beb
SHA256

30a72f7a7f6f9055a5ee2d84fb0c92bf4f0da96350465db543b1fecf83cc1b91
SHA512

c02ccba7c86261c2a1a950a3191b419f6d8990d2d8e5c83032246733734a7efeba40fb42406afd354a5f46b6f0f8d6c84360a8ecd4e281ab27b382161a124c56
SSDEEP

3072:rZ19D6NEk3Vm6WseEGEx4oNuMJ1yXTML/SuAFbB33XnOSSjtClJDep+9KpG4Yz9:U3Vm6WX9E2o4MyCKLXOSSM7KkIpBYz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3d1b42cfb16558df5bacb002aa2461bb_JaffaCakes118

Files

3d1b42cfb16558df5bacb002aa2461bb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d10dea5be16ff66e1c65683394cefefd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
??1type_info@@UAE@XZ
tolower
toupper
malloc
free
strstr
strncpy
_CxxThrowException
__CxxFrameHandler
strcmp
??3@YAXPAX@Z
memcpy
??2@YAPAXI@Z
_ftol
srand
rand
strlen
_except_handler3
strcat
strncat
_strnicmp
_strlwr
_stricmp
_strupr
_itoa
strcpy
strchr
memset

advapi32

CreateServiceA
GetUserNameA
GetServiceKeyNameA
StartServiceA
ControlService
OpenSCManagerA
DeleteService
CloseServiceHandle
ChangeServiceConfig2A
RegCreateKeyExA
RegSetValueExA
RegDeleteKeyA
RegDeleteValueA
RegQueryValueExA
RegEnumKeyExA
RegEnumValueA
RegOpenKeyExA
RegCloseKey
GetFileSecurityA
LookupAccountNameA
InitializeSecurityDescriptor
GetSecurityDescriptorDacl
GetAclInformation
GetLengthSid
InitializeAcl
GetAce
EqualSid
AddAce
AddAccessAllowedAce
SetSecurityDescriptorDacl
GetSecurityDescriptorControl
SetFileSecurityA

kernel32

MoveFileA
CloseHandle
SetFileTime
LocalFileTimeToFileTime
SystemTimeToFileTime
WriteFile
CreateFileA
FindNextFileA
FindFirstFileA
GetTickCount
GetSystemDirectoryA
lstrcmpiA
GetModuleFileNameA
WaitForSingleObject
CreateEventA
GetFileAttributesA
GetShortPathNameA
ExpandEnvironmentStringsA
OpenEventA
SetUnhandledExceptionFilter
GetCommandLineA
WideCharToMultiByte
MultiByteToWideChar
DeleteFileA
SetFileAttributesA
Process32Next
GetCurrentProcessId
Process32First
CreateToolhelp32Snapshot
GetStartupInfoA
FreeLibrary
LocalAlloc
InterlockedExchange
RaiseException
LoadLibraryA
GetCurrentDirectoryA
HeapFree
Sleep
GetProcAddress
GetModuleHandleA
HeapAlloc
GetProcessHeap
GetLastError
lstrcatA
ExitProcess
CreateDirectoryA
SetEnvironmentVariableA
lstrlenA
lstrcpyA
GetWindowsDirectoryA
GetTempPathA

user32

wsprintfA
CharNextA

Sections

.text
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 164KB - Virtual size: 163KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d10dea5be16ff66e1c65683394cefefd

Headers

File Characteristics

Imports

msvcrt

advapi32

kernel32

user32

Sections

.text Size: 16KB - Virtual size: 13KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 164KB - Virtual size: 163KB

.rsrc Size: 4KB - Virtual size: 3KB

.text
Size: 16KB - Virtual size: 13KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 164KB - Virtual size: 163KB

.rsrc
Size: 4KB - Virtual size: 3KB