418d9a53dfc48a32d2b3abca02aa8cac_JaffaCakes118

General

Target

418d9a53dfc48a32d2b3abca02aa8cac_JaffaCakes118
Size

16KB
MD5

418d9a53dfc48a32d2b3abca02aa8cac
SHA1

59a99de2b84135895e56a137c4f3e540dd09db65
SHA256

cb9ff25c37dbf2074127f68f8520bb4a4b6c2f2b00c2674878588d0d8195ce0b
SHA512

b356b1ffc8420885a5a08c55b8cb9707e5c9bde513a3540b9ebc7c2beb6d68bca18148f8a611df209b79bc54cc4406255e0a9a763f4dd05304ae8591db3d7925
SSDEEP

192:oM5m3Na+rgzVeSC6x5wbcrD3j9B827UX9FdISeQhAH6B5TMfrTJXKZ4EdNf:wNa++gl6x5h7UX9Fdc/cARi4Wf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
418d9a53dfc48a32d2b3abca02aa8cac_JaffaCakes118

Files

418d9a53dfc48a32d2b3abca02aa8cac_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ee8eb9fb59f717a890736bca86f5ec33

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

rpcrt4

UuidCreate

psapi

EnumProcesses
EnumProcessModules
GetModuleBaseNameA

kernel32

CopyFileA
DeleteFileA
MoveFileExA
GetTempFileNameA
GetSystemDirectoryA
GetProcAddress
LoadLibraryA
CloseHandle
OpenProcess
GetProcessHeap
GetModuleHandleA
WriteFile
lstrcpyA
GetFileSizeEx
CreateFileA
GetTickCount
CreateProcessA
lstrcatA
GetFileSize
WaitForSingleObject
ResumeThread
GetSystemWindowsDirectoryA
SetHandleInformation
GetTempPathA
RemoveDirectoryA
CreateDirectoryA
FindClose
FindNextFileA
FindFirstFileA
GetDriveTypeA
WinExec
HeapAlloc
HeapFree
Sleep
ReadFile
SetFilePointer

advapi32

CryptEncrypt
CryptImportKey
CryptAcquireContextA
StartServiceCtrlDispatcherA
RegisterServiceCtrlHandlerA
OpenServiceA
ControlService
StartServiceA
SetServiceStatus
OpenSCManagerA
CloseServiceHandle

shell32

ShellExecuteA
SHGetFolderPathA

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 784B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ee8eb9fb59f717a890736bca86f5ec33

Headers

DLL Characteristics

File Characteristics

Imports

rpcrt4

psapi

kernel32

advapi32

shell32

Sections

.text Size: 10KB - Virtual size: 10KB

.rdata Size: 3KB - Virtual size: 2KB

.data Size: 512B - Virtual size: 7KB

.rsrc Size: 1024B - Virtual size: 784B

.text
Size: 10KB - Virtual size: 10KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 512B - Virtual size: 7KB

.rsrc
Size: 1024B - Virtual size: 784B