698d68e923bf26e1bdaa496ab7d8589a_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

698d68e923bf26e1bdaa496ab7d8589a_JaffaCakes118
Size

159KB
MD5

698d68e923bf26e1bdaa496ab7d8589a
SHA1

e8a8a7f0cb27048ea05f014713b656493bf0467b
SHA256

e65a72b55b22cc164f36b1733a2104cb8972ee1daa33af79d4cc92673ae8bed1
SHA512

95ba0f2c7c0138e79ca6d6f279960cf46f0ddf392577cd986a434699ca07dc1b2150a31216a3b1fe49a63a97abba807f22606e2d9e9325db9a5e5d8f526ec9fd
SSDEEP

3072:nDLNnCYYVvsOSxHjnn7tzolKirFNAopgh6pdq3ScGq3x6zkHuUJ22:DhnfYVUOSRn7tzorAoKhAeSPixI+V

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
698d68e923bf26e1bdaa496ab7d8589a_JaffaCakes118

Files

698d68e923bf26e1bdaa496ab7d8589a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

af3ddcac3e5a257789bc638e320cea31

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTempPathA
Sleep
GetFileAttributesA
GetSystemDirectoryA
ReadFile
SetFilePointer
GetCurrentProcess
GetModuleHandleA
GetProcAddress
LoadLibraryA
TerminateProcess
OpenProcess
CopyFileA
CreateRemoteThread
FreeLibrary
GetVersion
SetUnhandledExceptionFilter
ReleaseMutex
CreateMutexA
GetCommandLineA
CreateDirectoryA
CreateThread
GetCurrentThreadId
DeleteFileA
GetStartupInfoA
WinExec
MoveFileA
GetLastError
GetLocalTime
GetModuleFileNameA
GetShortPathNameA
lstrcatA
GetEnvironmentVariableA
SetLastError
lstrcpyA
FindResourceA
LoadResource
CreateFileA
SystemTimeToFileTime
LocalFileTimeToFileTime
SetFileTime
GetWindowsDirectoryA
SizeofResource
WriteFile
lstrlenA
CloseHandle
FreeResource
CreateToolhelp32Snapshot
Process32First
Process32Next
lstrcmpiA
ExitProcess
WaitForSingleObject

user32

DefWindowProcA
DispatchMessageA
TranslateMessage
GetMessageA
UpdateWindow
ShowWindow
CreateWindowExA
RegisterClassExA
LoadCursorA
LoadIconA
PostThreadMessageA
BlockInput
GetInputState
wsprintfA

advapi32

RegQueryValueExA
OpenSCManagerA
CreateServiceA
CloseServiceHandle
RegOpenKeyExA
RegCloseKey
RegSetValueExA
StartServiceA
OpenServiceA
RegCreateKeyExA
RegDeleteKeyA
RegDeleteValueA
AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken
ControlService
QueryServiceStatus

shell32

ShellExecuteA

msvcrt

strncmp
_strcmpi
_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
strtok
??2@YAPAXI@Z
memset
memcpy
strchr
strcat
__CxxFrameHandler
_CxxThrowException
realloc
malloc
strlen
_except_handler3
strcpy
??3@YAXPAX@Z
_strlwr
strtoul
isdigit
strcmp
strstr
??1type_info@@UAE@XZ
_exit
_XcptFilter

Sections

.text
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 136KB - Virtual size: 135KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

af3ddcac3e5a257789bc638e320cea31

Headers

File Characteristics

Imports

kernel32

user32

advapi32

shell32

msvcrt

Sections

.text Size: 22KB - Virtual size: 21KB

.rsrc Size: 136KB - Virtual size: 135KB

.text
Size: 22KB - Virtual size: 21KB

.rsrc
Size: 136KB - Virtual size: 135KB