93a4936d8f34ca6babeac345f7ee8150_JaffaCakes118

General

Target

93a4936d8f34ca6babeac345f7ee8150_JaffaCakes118
Size

180KB
MD5

93a4936d8f34ca6babeac345f7ee8150
SHA1

ecf3a2a6c18f2360d9219a6c7c7bdb89f674e17d
SHA256

bfb5d76622cb4c6e29015d0ee47ae49857b16adbd04ca5b3c8e19ff1c4444ef8
SHA512

0a9f84ae5e3da7d960f10d8a34b0b280a8d5a4a1541332a7547228c54d62692734adc6f801ebb97fedb8a8454e8f4e71e979a495cb8fd7220e25f5001c6c66e6
SSDEEP

3072:7ZWqZmIdB4vkvXAa3fbijxENPihJVTZWBOqiCYtbGcGjt+MsHYqBNiTL5odfeVO:7ZvJdW6L3fb2mR6JVTZWwqpYe4MDqBMz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
93a4936d8f34ca6babeac345f7ee8150_JaffaCakes118

Files

93a4936d8f34ca6babeac345f7ee8150_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c0a6c15f9467e3be267fb7311e6bfd94

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

SHGetSpecialFolderPathA

shlwapi

SHEnumValueA
SHGetValueA
SHSetValueA
StrStrIA
SHEnumKeyExA

user32

wsprintfA

ole32

CoCreateGuid
CoCreateInstance
CoInitialize

rpcrt4

UuidToStringA

advapi32

CloseServiceHandle
RegSetValueExA
CryptAcquireContextA
CryptGenRandom
CryptReleaseContext
OpenSCManagerA
DeleteService
OpenServiceA
StartServiceA
CreateServiceA
RegCreateKeyExA
RegOpenKeyExA
RegCloseKey

msvcrt

srand
time
atoi
strlen
printf
islower
sprintf
fwrite
fopen
isgraph
strcat
strcpy
malloc
memcmp
free
wctomb
__mb_cur_max
isalnum
isspace
isupper
ispunct
isxdigit
tolower
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
mbstowcs
wcscpy
rand
strncpy
memcpy
??2@YAPAXI@Z
memset
strerror
isalpha
fclose

imagehlp

ImageNtHeader

kernel32

lstrlenA
SetFileTime
GetFileAttributesExA
WideCharToMultiByte
FindNextFileA
GetPrivateProfileStringA
GetFileAttributesA
FindFirstFileA
GetLastError
GetModuleHandleA
CreateFileA
CloseHandle
GetSystemDirectoryA
SleepEx
GetLocalTime
GetVersionExA
ExitProcess
GetStartupInfoA

Sections

.text
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 108KB - Virtual size: 105KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

c0a6c15f9467e3be267fb7311e6bfd94

Headers

File Characteristics

Imports

shell32

shlwapi

user32

ole32

rpcrt4

advapi32

msvcrt

imagehlp

kernel32

Sections

.text Size: 48KB - Virtual size: 47KB

.rdata Size: 20KB - Virtual size: 18KB

.data Size: 108KB - Virtual size: 105KB

.text
Size: 48KB - Virtual size: 47KB

.rdata
Size: 20KB - Virtual size: 18KB

.data
Size: 108KB - Virtual size: 105KB