732f7e9654fd2b77a10cb2a4a5ced508_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

732f7e9654fd2b77a10cb2a4a5ced508_JaffaCakes118
Size

224KB
MD5

732f7e9654fd2b77a10cb2a4a5ced508
SHA1

e93688ebfee4de0f8e28b458a8e3b9ee844418c7
SHA256

4297e280f6d6e871af31da85ee781903385ef54bb0c93903298f9ddc4414ad83
SHA512

e800d680ae3b34ebb5549f9e7ca2bab270ecd89adb55d9724e9f625537ebfe6d9db1b7ba3a1000164a8c8339b94470ba200b9620ffc0e4e9fc017d0baa9c6675
SSDEEP

3072:bucBQXIPChZXglrQbG6d1oXkVB20yje0v5bfoxtn:qcBQYKhlg4GC1oXkr3yje0v5bfo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
732f7e9654fd2b77a10cb2a4a5ced508_JaffaCakes118

Files

732f7e9654fd2b77a10cb2a4a5ced508_JaffaCakes118
.exe windows:4 windows x86 arch:x86

fb5d1e1e43c22f5969bc8f65fa248364

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

OleInitialize
CoRegisterClassObject
CoRegisterSurrogate
CoInitialize
OleUninitialize

advapi32

SetServiceStatus
RegCloseKey
RegOpenKeyExA
RegQueryValueExA
AllocateAndInitializeSid
FreeSid
RegDeleteKeyA
RegCreateKeyExA
QueryServiceStatus
OpenThreadToken
OpenServiceA
OpenSCManagerA
LookupPrivilegeValueA
CreateServiceW
ControlService
SetSecurityDescriptorDacl
SetEntriesInAclA
RegisterServiceCtrlHandlerA
RegSetValueExA
RegEnumKeyA
InitializeSecurityDescriptor
StartServiceCtrlDispatcherA
OpenProcessToken

wsnmp32

ord501
ord502
ord503
ord504
ord600
ord500
ord602
ord900
ord903
ord905
ord906
ord999
ord402
ord401
ord201
ord200
ord601

kernel32

LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetSystemWindowsDirectoryA
SetConsoleCtrlHandler
ReadFile
SetStdHandle
LoadLibraryA
GetProcAddress
GetOEMCP
GetACP
GetCPInfo
IsBadCodePtr
IsBadReadPtr
IsBadWritePtr
VirtualAlloc
SetUnhandledExceptionFilter
CloseHandle
SetFilePointer
FlushFileBuffers
GetLastError
WriteFile
VirtualFree
CreateProcessA
WriteConsoleW
MultiByteToWideChar
RtlUnwind
GetCommandLineA
GetVersion
ExitProcess
RaiseException
HeapFree
TerminateProcess
GetCurrentProcess
HeapReAlloc
HeapAlloc
HeapSize
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate

Sections

.text
Size: 76KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 32KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 96KB - Virtual size: 934KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sxdata
Size: 4KB - Virtual size: 404B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fb5d1e1e43c22f5969bc8f65fa248364

Headers

File Characteristics

Imports

ole32

advapi32

wsnmp32

kernel32

Sections

.text Size: 76KB - Virtual size: 72KB

.rdata Size: 32KB - Virtual size: 28KB

.data Size: 96KB - Virtual size: 934KB

.idata Size: 4KB - Virtual size: 3KB

.sxdata Size: 4KB - Virtual size: 404B

.reloc Size: 8KB - Virtual size: 6KB

.text
Size: 76KB - Virtual size: 72KB

.rdata
Size: 32KB - Virtual size: 28KB

.data
Size: 96KB - Virtual size: 934KB

.idata
Size: 4KB - Virtual size: 3KB

.sxdata
Size: 4KB - Virtual size: 404B

.reloc
Size: 8KB - Virtual size: 6KB