41fccb35b09ea336ef7e0654ca1d0537_JaffaCakes118

General

Target

41fccb35b09ea336ef7e0654ca1d0537_JaffaCakes118
Size

55KB
MD5

41fccb35b09ea336ef7e0654ca1d0537
SHA1

714e945487cdecb5021dc4038264262353cb4ccf
SHA256

0fc3c10324fbf34cf49d51d1d00563b53ede333573a71e4576daf110d7da53d4
SHA512

a52534ae70ecf34708ee565cd82bcc52628a67a3238e5c66a4e4e5f39733c190c8d03e465ab5b9fbf5f74582c4b290305fae0e6c545377915abae3a39e47c9e0
SSDEEP

768:B66R5/+KebA3w2xpT8bhvcN0UB8p8pQrC88M6G4T96kakhVBArx:pR5t4sROYA8GrCJb6qhVBAd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
41fccb35b09ea336ef7e0654ca1d0537_JaffaCakes118

Files

41fccb35b09ea336ef7e0654ca1d0537_JaffaCakes118
.exe windows:4 windows x86 arch:x86

10e8b9c0ca6a6ec60ccaf039e811c506

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapFree
DeviceIoControl
HeapAlloc
GetProcessHeap
WriteFile
WinExec
ExitProcess
GetSystemTime
GetProcAddress
GetModuleHandleA
GetTickCount
LoadLibraryA
WaitForSingleObject
SetEvent
CreateThread
CreateEventA
CreateProcessA
GetShortPathNameA
lstrlenA
lstrcpyA
GetCommandLineA
VirtualQuery
InterlockedExchange
lstrcatA
GetFileTime
SetFileTime
GetEnvironmentVariableA
FindFirstFileA
OutputDebugStringA
FindNextFileA
GetSystemDirectoryA
CreateFileA
GetLastError
CloseHandle
LoadLibraryExA
DeleteFileA

user32

wsprintfA
GetDesktopWindow

advapi32

StartServiceA
CloseServiceHandle
GetUserNameA
LogonUserA
ImpersonateLoggedOnUser
AllocateAndInitializeSid
CheckTokenMembership
FreeSid
CreateServiceA
OpenSCManagerA

ntdll

RtlUnwind

psapi

EnumDeviceDrivers
GetDeviceDriverBaseNameA

ws2_32

inet_addr
closesocket
accept
WSAStartup
bind
socket
htons
listen
connect

imagehlp

CheckSumMappedFile

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 40KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

10e8b9c0ca6a6ec60ccaf039e811c506

Headers

File Characteristics

Imports

kernel32

user32

advapi32

ntdll

psapi

ws2_32

imagehlp

Sections

.text Size: 7KB - Virtual size: 7KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 40KB - Virtual size: 40KB

.rsrc Size: 4KB - Virtual size: 16B

.text
Size: 7KB - Virtual size: 7KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 40KB - Virtual size: 40KB

.rsrc
Size: 4KB - Virtual size: 16B