60a87ec2fcea72cb0e254f8fd36c5006_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

60a87ec2fcea72cb0e254f8fd36c5006_JaffaCakes118
Size

34KB
MD5

60a87ec2fcea72cb0e254f8fd36c5006
SHA1

0b1dde47b736150a4e8338e65e48bb0a6ebf9c4b
SHA256

ba179f357218285c4518f792f1736ec0ee831c85298998a184ac4a1c6145eb7e
SHA512

7d5f64e6dc90e21bb4d6fc7d4c229622334bc8c0662b9227fe893286d373655c6c2664aa01648bc796383b80d225ad4038208db48e7fb796cc911b4093ff895d
SSDEEP

768:vRUhdRU+jxwSE/A/uSkFE5fWeDu1/QlklDZr:ydxj3vu3E5fWeDsYG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
60a87ec2fcea72cb0e254f8fd36c5006_JaffaCakes118

Files

60a87ec2fcea72cb0e254f8fd36c5006_JaffaCakes118
.exe windows:4 windows x86 arch:x86

32896f87b3655f09a6f812567f61059a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

memset
_strnicmp
strncmp
strncpy
_strdup
free
strcmp
memmove
strlen
strcpy
strcat
memcpy

kernel32

GetModuleHandleA
HeapCreate
HeapDestroy
ExitProcess
WinExec
GetLogicalDrives
GetVolumeInformationA
GetDriveTypeA
GlobalMemoryStatus
Sleep
EnterCriticalSection
WaitForSingleObject
LeaveCriticalSection
InitializeCriticalSection
CloseHandle
CreateThread
GetModuleFileNameA
GetCurrentProcess
DuplicateHandle
CreatePipe
GetStdHandle
HeapAlloc
CreateProcessA
HeapFree
GetCommandLineA
PeekNamedPipe
ReadFile
TlsAlloc
TlsSetValue
GetCurrentThreadId
GetTickCount
TlsGetValue
FindFirstFileA
FindClose
GetFileAttributesA
DeleteFileA
CopyFileA
SetFileAttributesA
CreateDirectoryA
GetLastError
FindNextFileA
WriteFile
CreateFileA
SetFilePointer
GetFileSize
HeapReAlloc
GlobalAlloc
GlobalLock
GlobalUnlock
MultiByteToWideChar
WaitForMultipleObjects
GetCurrentThread
CreateSemaphoreA
ReleaseSemaphore

user32

CharLowerA
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard

advapi32

SetServiceStatus
StartServiceCtrlDispatcherA
OpenSCManagerA
OpenServiceA
DeleteService
CloseServiceHandle
CreateServiceA
ChangeServiceConfig2A
RegisterServiceCtrlHandlerA
StartServiceA
ControlService
QueryServiceStatus

shell32

SHGetSpecialFolderLocation
SHGetPathFromIDListA
ShellExecuteExA

winmm

timeBeginPeriod
timeEndPeriod

ole32

CoInitialize
CoCreateInstance
CoUninitialize
CoTaskMemFree

Sections

.code
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 43B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

32896f87b3655f09a6f812567f61059a

Headers

File Characteristics

Imports

msvcrt

kernel32

user32

advapi32

shell32

winmm

ole32

Sections

.code Size: 14KB - Virtual size: 13KB

.text Size: 13KB - Virtual size: 13KB

.rdata Size: 512B - Virtual size: 43B

.data Size: 5KB - Virtual size: 5KB

.code
Size: 14KB - Virtual size: 13KB

.text
Size: 13KB - Virtual size: 13KB

.rdata
Size: 512B - Virtual size: 43B

.data
Size: 5KB - Virtual size: 5KB