832415ff93b6af78ab1482c391079b29_JaffaCakes118

General

Target

832415ff93b6af78ab1482c391079b29_JaffaCakes118
Size

132KB
MD5

832415ff93b6af78ab1482c391079b29
SHA1

b42bd20d835761fb7a581ac2f2edf0f75b8fd50d
SHA256

dad981d1e619406278c612af253e4235c372b866114f5590d526c13f604463d5
SHA512

e3fb9c7b8511ae35991172e3fc692aad57c0a694c1bc935927a32b486206f6fd8d4e87358c14f802547cb97ce2695dfdfd9d2a88a227d423a9ef2dab5f0642e0
SSDEEP

1536:mKam08eU3+JsM1qt+folCaRyupKCyW1ZanFHBLvKuRVwuDQjbibO3Jf:ZaQekjM1qt++RTnZZylBDKXuDQjbibS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
832415ff93b6af78ab1482c391079b29_JaffaCakes118

Files

832415ff93b6af78ab1482c391079b29_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e96c4bed2e87ac488cc029ff034f5a04

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetShortPathNameA
GetModuleFileNameA
CreateThread
GetTempPathA
lstrlenA
GetEnvironmentVariableA
CopyFileA
GetSystemDirectoryA
CompareStringW
CompareStringA
lstrcpyA
GetCurrentProcess
SetPriorityClass
GetCurrentThread
SetThreadPriority
CreateProcessA
ResumeThread
CreateFileA
GetFileSize
ReadFile
CloseHandle
FindFirstFileA
HeapAlloc
WriteFile
FindClose
Sleep
GetTickCount
lstrcatA
FreeLibrary
HeapFree
IsBadReadPtr
LoadLibraryA
GetProcAddress
VirtualFree
VirtualProtect
VirtualAlloc
GetProcessHeap
GetLastError
HeapReAlloc
RtlUnwind
ExitProcess
TerminateProcess
GetTimeZoneInformation
GetSystemTime
GetLocalTime
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
GetVersionExA
HeapDestroy
HeapCreate
WideCharToMultiByte
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetCPInfo
GetACP
GetOEMCP
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
SetEnvironmentVariableA

user32

wsprintfA

advapi32

RegQueryValueExA
OpenSCManagerA
CreateServiceA
OpenServiceA
StartServiceA
RegOpenKeyA
CloseServiceHandle
StartServiceCtrlDispatcherA
RegisterServiceCtrlHandlerA
SetServiceStatus
RegCreateKeyA
RegSetValueExA
RegEnumKeyExA
RegEnumValueA
RegOpenKeyExA
RegCloseKey

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 92KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e96c4bed2e87ac488cc029ff034f5a04

Headers

File Characteristics

Imports

kernel32

user32

advapi32

Sections

.text Size: 28KB - Virtual size: 27KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 92KB - Virtual size: 92KB

.rsrc Size: 4KB - Virtual size: 1KB

.text
Size: 28KB - Virtual size: 27KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 92KB - Virtual size: 92KB

.rsrc
Size: 4KB - Virtual size: 1KB