6445ed7bf3628ece4af5595822a6e3b1_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

6445ed7bf3628ece4af5595822a6e3b1_JaffaCakes118
Size

113KB
MD5

6445ed7bf3628ece4af5595822a6e3b1
SHA1

ee18f0d7def4fd8d2e97d4cae2356fa641211448
SHA256

91b5a65388c48468b672fb6ae94a79090d9ae64c2eb7d6a3e6dcfb1bfda97917
SHA512

2fb8c0f23b1690db0ad5c8c2b453a2861ef7299e0f1be58ec25e535192abfa34599f23f85a364dd919ace8d0e2bc6bb8e9f77b72025cce36f596b3833df74f56
SSDEEP

3072:w8H/Il3w/ZAisa/Lm1uVdCb0AzcSFxnK7UOZm7ksQu3:8KxAQoO8fTFx2HmgsQC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6445ed7bf3628ece4af5595822a6e3b1_JaffaCakes118

Files

6445ed7bf3628ece4af5595822a6e3b1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c22bba49a95fb29bc572f2b9303992c3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadResource
FindResourceA
lstrcatA
GetTempPathA
lstrcpyA
lstrlenA
lstrcmpiA
SetLastError
GetLastError
GetFileAttributesA
GetSystemDirectoryA
FreeLibrary
CreateFileA
LoadLibraryA
GetModuleFileNameA
SetUnhandledExceptionFilter
ReleaseMutex
CreateMutexA
GetCommandLineA
CopyFileA
OutputDebugStringA
GetStringTypeA
LCMapStringW
SystemTimeToFileTime
LocalFileTimeToFileTime
SetFileTime
SizeofResource
WriteFile
ExitProcess
CloseHandle
MoveFileA
SetFileAttributesA
DeleteFileA
GetProcAddress
RtlUnwind
RaiseException
GetModuleHandleA
GetStartupInfoA
GetVersion
HeapAlloc
HeapFree
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
IsBadWritePtr
IsBadReadPtr
IsBadCodePtr
GetCPInfo
GetACP
GetOEMCP
MultiByteToWideChar
LCMapStringA
GetStringTypeW

user32

wsprintfA

advapi32

CloseServiceHandle
OpenServiceA
StartServiceA
OpenSCManagerA
CreateServiceA
RegCreateKeyA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegSetValueExA

Sections

.text
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 88KB - Virtual size: 87KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pepack
Size: 17B - Virtual size: 17B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c22bba49a95fb29bc572f2b9303992c3

Headers

File Characteristics

Imports

kernel32

user32

advapi32

Sections

.text Size: 17KB - Virtual size: 17KB

.rdata Size: 3KB - Virtual size: 3KB

.data Size: 2KB - Virtual size: 3KB

.rsrc Size: 88KB - Virtual size: 87KB

.text Size: 512B - Virtual size: 512B

.text Size: 512B - Virtual size: 512B

.pepack Size: 17B - Virtual size: 17B

.text
Size: 17KB - Virtual size: 17KB

.rdata
Size: 3KB - Virtual size: 3KB

.data
Size: 2KB - Virtual size: 3KB

.rsrc
Size: 88KB - Virtual size: 87KB

.text
Size: 512B - Virtual size: 512B

.text
Size: 512B - Virtual size: 512B

.pepack
Size: 17B - Virtual size: 17B