60e18c2af5d55e684c14816ddb8adf0d_JaffaCakes118

General

Target

60e18c2af5d55e684c14816ddb8adf0d_JaffaCakes118
Size

135KB
MD5

60e18c2af5d55e684c14816ddb8adf0d
SHA1

756043b63781d2d20e6763fa3e3a62da176cbd12
SHA256

b007b390a2d029d66148dc8d1e05a374e43bbbaad33e98e89c8eae30d41827fc
SHA512

706ac8343163597785ae8a58a4f9a6fd69d2c02b4e268ff1fbf110fd11b725c8e6f0159df60213eeabf38a417be97fe0f0c04e294ee3ebce7396a833a760fa5f
SSDEEP

3072:TgJjOyoL1QaL7wjIq956zObxoG5mjyN1S0S:TgJKyoL1OJ9EObxo4mGN1S0S

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
60e18c2af5d55e684c14816ddb8adf0d_JaffaCakes118

Files

60e18c2af5d55e684c14816ddb8adf0d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5b5db1d2a05c02729d4f1688389ef5d9

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrlenA
GetProfileStringW
TlsAlloc
TlsGetValue
RemoveDirectoryA
GetTickCount
DeleteFileA
GetStartupInfoA
CloseHandle
CreateProcessA
Sleep

user32

InsertMenuItemA
GetKeyNameTextA
DestroyIcon
DrawEdge
GetDlgItemInt
SetCursor
SetDlgItemInt
IsDlgButtonChecked

advapi32

StartServiceCtrlDispatcherA
RegSetValueExA
RegisterServiceCtrlHandlerA
SetEntriesInAclA
SetSecurityDescriptorDacl
SetServiceStatus
AdjustTokenPrivileges
CloseServiceHandle
ControlService
CreateServiceA
DeleteService
GetTokenInformation
RegCloseKey
RegOpenKeyExA
RegQueryValueExA
AllocateAndInitializeSid
FreeSid
OpenProcessToken
LookupPrivilegeValueA
InitializeSecurityDescriptor
RegEnumKeyA

userenv

DestroyEnvironmentBlock
CreateEnvironmentBlock
UnloadUserProfile

msvcrt

free
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
exit
fclose
fread
fputs
fopen
_strcmpi
realloc
malloc
_exit
_XcptFilter
__p___initenv

Sections

.text
Size: 76KB - Virtual size: 73KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 48KB - Virtual size: 187KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5b5db1d2a05c02729d4f1688389ef5d9

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

userenv

msvcrt

Sections

.text Size: 76KB - Virtual size: 73KB

.data Size: 48KB - Virtual size: 187KB

.rsrc Size: 4KB - Virtual size: 1KB

.reloc Size: 3KB - Virtual size: 3KB

.text
Size: 76KB - Virtual size: 73KB

.data
Size: 48KB - Virtual size: 187KB

.rsrc
Size: 4KB - Virtual size: 1KB

.reloc
Size: 3KB - Virtual size: 3KB