5dc4634afc84eaf49af3793263bf719e_JaffaCakes118

General

Target

5dc4634afc84eaf49af3793263bf719e_JaffaCakes118
Size

26KB
MD5

5dc4634afc84eaf49af3793263bf719e
SHA1

b323f7f4a97ab8d4d4b27d75f9c802a84277a402
SHA256

a19fb3a3484468d17b9fd1416fbb6fcd02d5f5bfffab67a5a09df98964c6797a
SHA512

b8b3c303b455671e804059aa4b2a0277bb9b86dc89bcac718b385d9d3a98e7ba3b68d1cb1ad3f3194857bb5109d6efd9f29e4103b82d6aa90ae5a0f078139e28
SSDEEP

384:6ZGKC5VSpFKyoKiyc4EhiVwX2aTfTO2D3Cr1i/YDzAZLWg0mEh/2NfO:6fCavmFyPDV0Nfy2D3CU/YH4R02NO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5dc4634afc84eaf49af3793263bf719e_JaffaCakes118

Files

5dc4634afc84eaf49af3793263bf719e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e651f837ea06eb416c65ecae6c276048

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

QueryServiceStatus
AdjustTokenPrivileges
StartServiceCtrlDispatcherA
SetServiceStatus
StartServiceA
QueryServiceConfigA
ChangeServiceConfigA
CreateServiceA
OpenSCManagerA
OpenServiceA
ControlService
CloseServiceHandle
RegisterServiceCtrlHandlerA
OpenProcessToken
LookupPrivilegeValueA

kernel32

VirtualFreeEx
WaitForSingleObject
CreateRemoteThread
GetProcAddress
GetModuleHandleA
WriteProcessMemory
VirtualAllocEx
lstrlenW
GetSystemTime
MultiByteToWideChar
GetCurrentProcess
Process32Next
lstrcmpi
lstrlen
Process32First
CreateToolhelp32Snapshot
SystemTimeToFileTime
SetFileTime
GetSystemDirectoryA
GetFileAttributesA
GetTempPathA
CloseHandle
SetFilePointer
ReadFile
GetModuleFileNameA
CopyFileA
FreeLibrary
lstrcpy
GetLastError
Sleep
CreateFileA
WriteFile
OpenProcess
GetStartupInfoA

msvcrt

_controlfp
??3@YAXPAX@Z
??2@YAPAXI@Z
memset
__CxxFrameHandler
_EH_prolog
memcpy
strrchr
_except_handler3
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type

user32

wsprintfA

ole32

CoCreateGuid

Sections

.text
Size: 12KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.petite
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

e651f837ea06eb416c65ecae6c276048

Headers

File Characteristics

Imports

advapi32

kernel32

msvcrt

user32

ole32

Sections

.text Size: 12KB - Virtual size: 20KB

.petite Size: 1024B - Virtual size: 4KB

.idata Size: 2KB - Virtual size: 4KB

.text
Size: 12KB - Virtual size: 20KB

.petite
Size: 1024B - Virtual size: 4KB

.idata
Size: 2KB - Virtual size: 4KB