74ef36a4831910ceb64f872fd45e18c1_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

74ef36a4831910ceb64f872fd45e18c1_JaffaCakes118
Size

41KB
MD5

74ef36a4831910ceb64f872fd45e18c1
SHA1

ad5f2409cd6fe5bba5d835bd9344026798ede26b
SHA256

98ffd24c8da89ee91f275e1299d08d7b84053eb2d02a68eecb5a9e0a49d82299
SHA512

3b218a9b9b05231fc1588a507f2567d53cc7a7cc9c378bcb16c8ca50a7d87c5e28887808dd6f7bb5a8a05ad916bec9ba4d8c15851ea2f26c0acd783532fae61a
SSDEEP

768:vIEmFxyKsNv1xkYA4TR5i0nbvwC82/ZPAggG3frZ3A+ZB:vIrHfsXkQLi0bY32/agg0frZA+j

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
74ef36a4831910ceb64f872fd45e18c1_JaffaCakes118

Files

74ef36a4831910ceb64f872fd45e18c1_JaffaCakes118
.exe windows:5 windows x86 arch:x86

609c7a2044aa9e060323f8209fc77212

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemTime
GetVersionExA
ConnectNamedPipe
CreateWaitableTimerA
WaitForSingleObjectEx
GetSystemDirectoryA
GetTickCount
DisconnectNamedPipe
SuspendThread
ResumeThread
SetEvent
CreateEventA
CreateNamedPipeA
CreateThread
WaitForSingleObject
lstrlenA
CreateFileA
DeviceIoControl
GetLastError
SetFilePointer
WriteFile
SetWaitableTimer
WaitForMultipleObjectsEx
HeapFree
GetEnvironmentStringsW
GetEnvironmentStrings
CloseHandle
ReadFile
HeapAlloc
GetCommandLineA
GetVersion
ExitProcess
HeapDestroy
HeapCreate
VirtualFree
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
VirtualAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
MultiByteToWideChar
FreeEnvironmentStringsW
FlushFileBuffers
SetStdHandle
WideCharToMultiByte
GetCPInfo
GetACP
GetOEMCP
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetCurrentThreadId
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue
RtlUnwind
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetProcAddress
LoadLibraryA

user32

wsprintfA

advapi32

RegCloseKey
ControlService
DeleteService
OpenSCManagerA
CreateServiceA
CloseServiceHandle
OpenServiceA
QueryServiceStatus
StartServiceA
RegisterEventSourceA
ReportEventA
DeregisterEventSource
SetServiceStatus
RegisterServiceCtrlHandlerA
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
StartServiceCtrlDispatcherA
RegQueryValueExA
RegOpenKeyExA

Sections

.text
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

609c7a2044aa9e060323f8209fc77212

Headers

File Characteristics

Imports

kernel32

user32

advapi32

Sections

.text Size: 22KB - Virtual size: 22KB

.rdata Size: 3KB - Virtual size: 3KB

.data Size: 11KB - Virtual size: 16KB

.rsrc Size: 3KB - Virtual size: 2KB

.text
Size: 22KB - Virtual size: 22KB

.rdata
Size: 3KB - Virtual size: 3KB

.data
Size: 11KB - Virtual size: 16KB

.rsrc
Size: 3KB - Virtual size: 2KB