82c7e01868666df7006e243fa34d9b48_JaffaCakes118

General

Target

82c7e01868666df7006e243fa34d9b48_JaffaCakes118
Size

48KB
MD5

82c7e01868666df7006e243fa34d9b48
SHA1

463bc9404f993f11483485b3268e4bffb503a689
SHA256

91dd29bd1be433ec80cf04589c83c641189441c05ff182ed536a080042dcf3db
SHA512

39a908b1154633ab838a30bd50d0aa343eded8961bce4330511d66a900bb0b5fd6ba9359141135bce22f051e7d42b4a990f8113db2efd153fb60795d1423bbdd
SSDEEP

768:KzAAIkAg76eufCVNUSIkbN2l2x/807evgdpMSd4Ogt8c:KznIkABeufWNUTzl2x77kCg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
82c7e01868666df7006e243fa34d9b48_JaffaCakes118

Files

82c7e01868666df7006e243fa34d9b48_JaffaCakes118
.exe windows:4 windows x86 arch:x86

38a411d254941fe2e278c1bb8ed27469

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

x:\Dev\Dl-gui\BigM\V 1.24\scr\MyEx\Release\MyEx.pdb

Imports

kernel32

LoadResource
SizeofResource
FindResourceA
WinExec
GlobalAlloc
GetTempPathA
SetSystemTime
GetSystemTime
LockResource
GetSystemDirectoryA
lstrcatA
CreateFileA
WriteFile
CloseHandle
GetModuleFileNameA
GlobalFree
ExitProcess
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersionExA
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetProcAddress
TerminateProcess
GetCurrentProcess
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
LoadLibraryA
RtlUnwind
InterlockedExchange
VirtualQuery
GetACP
GetOEMCP
GetCPInfo
HeapAlloc
VirtualAlloc
HeapReAlloc
HeapSize
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
VirtualProtect
GetSystemInfo

advapi32

OpenServiceA
CloseServiceHandle
StartServiceA
LockServiceDatabase
ChangeServiceConfigA
UnlockServiceDatabase
OpenSCManagerA

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

38a411d254941fe2e278c1bb8ed27469

Headers

File Characteristics

PDB Paths

Imports

kernel32

advapi32

Sections

.text Size: 16KB - Virtual size: 15KB

.rdata Size: 8KB - Virtual size: 5KB

.data Size: 4KB - Virtual size: 2KB

.rsrc Size: 16KB - Virtual size: 15KB

.text
Size: 16KB - Virtual size: 15KB

.rdata
Size: 8KB - Virtual size: 5KB

.data
Size: 4KB - Virtual size: 2KB

.rsrc
Size: 16KB - Virtual size: 15KB