838a5d9afd2d321910af5f9d8ae4325e_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

838a5d9afd2d321910af5f9d8ae4325e_JaffaCakes118
Size

56KB
MD5

838a5d9afd2d321910af5f9d8ae4325e
SHA1

def5b18a4d5060ae08199280c1c35499b6e33f15
SHA256

4a7f056bed5a07a71f487dc142f9c5159f100cdb144bdb54b938febdbae3f642
SHA512

4dbff29c4a339a5e5bf6c93258eee0fed433b7da4eed9a478b49ac3c226b5b279e80831fe18e82a7817014e4527c74ce0272ac7938552e18d0ef9c5d6ad4ba8c
SSDEEP

768:WvTXTUgVfePy8vFPOTVIOMIQSygAVL4sbD9Pl0LxdGjAhoT/bmyfiA+mRj4RRO:uTIeWPVO4L4Qip0359sRO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
838a5d9afd2d321910af5f9d8ae4325e_JaffaCakes118

Files

838a5d9afd2d321910af5f9d8ae4325e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bd15c862dd2d91b8c4d88cebe416417f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SystemTimeToFileTime
CreateFileA
LoadResource
FindResourceA
lstrcatA
lstrcpyA
SetLastError
LoadLibraryA
GetLastError
ReadFile
SetFilePointer
LocalFileTimeToFileTime
Sleep
SetUnhandledExceptionFilter
ReleaseMutex
CreateMutexA
GetCommandLineA
CreateDirectoryA
CreateThread
GetCurrentThreadId
GetModuleHandleA
DuplicateHandle
SetFileTime
SizeofResource
GetStartupInfoA
WriteFile
lstrlenA
FreeResource
lstrcmpiA
ExitProcess
GetWindowsDirectoryA
ReadProcessMemory
VirtualFree
VirtualAlloc
GetSystemDirectoryA
LoadLibraryExA
GetProcAddress
FreeLibrary
OpenProcess
CloseHandle
CreateToolhelp32Snapshot
Process32First
Process32Next
GetModuleFileNameA
GetCurrentProcess

user32

LoadCursorA
RegisterClassExA
CreateWindowExA
UpdateWindow
LoadIconA
DispatchMessageA
DefWindowProcA
SendMessageA
ShowWindow
GetMessageA
TranslateMessage
PostThreadMessageA
GetInputState
GetForegroundWindow
wsprintfA

advapi32

RegCloseKey
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
RegOpenKeyExA
RegQueryValueExA
CloseServiceHandle
CreateServiceA
OpenSCManagerA
RegDeleteValueA
RegDeleteKeyA
RegCreateKeyExA
StartServiceA
OpenServiceA

msvcrt

_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
_stricmp
_strcmpi
strstr
printf
strrchr
strncpy
realloc
malloc
strtok
??2@YAPAXI@Z
_except_handler3
strchr
__CxxFrameHandler
_CxxThrowException
??3@YAXPAX@Z
??1type_info@@UAE@XZ
_exit
_XcptFilter
exit

psapi

GetModuleFileNameExA
EnumProcessModules

Sections

.ZP
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.TTS
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.TMD
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

bd15c862dd2d91b8c4d88cebe416417f

Headers

File Characteristics

Imports

kernel32

user32

advapi32

msvcrt

psapi

Sections

.ZP Size: 8KB - Virtual size: 7KB

.TTS Size: 4KB - Virtual size: 3KB

.TMD Size: 4KB - Virtual size: 2KB

.rsrc Size: 36KB - Virtual size: 36KB

.ZP
Size: 8KB - Virtual size: 7KB

.TTS
Size: 4KB - Virtual size: 3KB

.TMD
Size: 4KB - Virtual size: 2KB

.rsrc
Size: 36KB - Virtual size: 36KB