4a4cff8e779268d964adb7a6b09df3ab_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

4a4cff8e779268d964adb7a6b09df3ab_JaffaCakes118
Size

37KB
MD5

4a4cff8e779268d964adb7a6b09df3ab
SHA1

af9cad49dfe8c6b71721e688a5309311a75a017a
SHA256

b31118a58dbb4229cb1da7ed55cb12dc6a973a3f04441c610682adefbaf50b54
SHA512

35fc2a77ea3699dd9f5feb72d0c44cc674721239a987a1a3d279fddcb144da26b230b361ed440d1e3ab14c253cf9bdfd7607c4cc0db3a3657bcd62fbbe740167
SSDEEP

384:9kvHgThJXbbFpWxbc57WPdC1CH2dPR4GuAmLJwyMX+8PjCW2MehvBYtPJYZ:9yHQLbWOoE0iCJwtX+8Pd2Me5BYtW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4a4cff8e779268d964adb7a6b09df3ab_JaffaCakes118

Files

4a4cff8e779268d964adb7a6b09df3ab_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1961f06c4f97ebf52fdace7c9f08c660

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SystemTimeToFileTime
CreateFileA
FindResourceA
lstrcatA
GetTempPathA
ExitProcess
GetFileAttributesA
GetSystemDirectoryA
Sleep
lstrlenA
SetUnhandledExceptionFilter
GetLastError
LocalFileTimeToFileTime
GetCommandLineA
GetCurrentThreadId
HeapReAlloc
VirtualAlloc
HeapAlloc
IsBadCodePtr
IsBadWritePtr
IsBadReadPtr
GetStringTypeW
GetStringTypeA
SetFileTime
SizeofResource
MoveFileA
SetFileAttributesA
DeleteFileA
LoadLibraryA
GetProcAddress
FreeLibrary
OutputDebugStringA
CreateMutexA
RtlUnwind
GetModuleHandleA
GetStartupInfoW
GetVersion
GetCPInfo
GetACP
GetOEMCP
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameW
FreeEnvironmentStringsA
MultiByteToWideChar
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetEnvironmentStrings
GetCommandLineW
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
WriteFile
WideCharToMultiByte
LCMapStringA
LCMapStringW

user32

LoadIconA
GetInputState
PostThreadMessageA
GetMessageA
EnumWindows
GetClassNameA
SetWindowPos

advapi32

OpenSCManagerA
OpenServiceA
ChangeServiceConfigA
ControlService
StartServiceA
CloseServiceHandle
RegCreateKeyExA
RegSetValueExA
RegCloseKey

Sections

.text
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 928B - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1961f06c4f97ebf52fdace7c9f08c660

Headers

File Characteristics

Imports

kernel32

user32

advapi32

Sections

.text Size: 19KB - Virtual size: 19KB

.rdata Size: 1KB - Virtual size: 1KB

.data Size: 10KB - Virtual size: 10KB

INIT Size: 1KB - Virtual size: 1KB

.rsrc Size: 928B - Virtual size: 928B

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 19KB - Virtual size: 19KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 10KB - Virtual size: 10KB

INIT
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 928B - Virtual size: 928B

.reloc
Size: 1KB - Virtual size: 1KB