952deb76bfb4b8c190ac3514c5218290_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

952deb76bfb4b8c190ac3514c5218290_JaffaCakes118
Size

1.3MB
MD5

952deb76bfb4b8c190ac3514c5218290
SHA1

e5d00f1fe6a552e32bf87f1cbf5f9eafe21a4a67
SHA256

12ab40bd7bfe00e11ae37ab284a0f2fa7b0ce279ffcb00f264b999b93e3154df
SHA512

d01dae9f955fd5b8e5af30e08346db37dc1e370d48b53f744eb74502a55b7c2f12d757153e2ec6bd90667f33755a305179847d0b144e66dd6f00fadbed558896
SSDEEP

24576:ErsAmXYsOtR6AQKKPM+zlZVaBZzrlcmoUCx49/x2Mhf2bz:2zQsRe3PM+t6PlYk9pLhf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
952deb76bfb4b8c190ac3514c5218290_JaffaCakes118

Files

952deb76bfb4b8c190ac3514c5218290_JaffaCakes118
.exe windows:5 windows x86 arch:x86

4a0772cf53bf4fe4ca3a1d2bc74fb6ef

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_XcptFilter �1

kernel32

CreateProcessA
SetThreadPriority
GetCurrentThread
SetPriorityClass
ResumeThread
GetEnvironmentVariableA
GetShortPathNameA
GetStartupInfoA
GetTempPathA
FindResourceA
LoadResource
GetModuleHandleA
CreateFileA
SystemTimeToFileTime
LocalFileTimeToFileTime
SetFileTime
SizeofResource
WriteFile
GetModuleFileNameA
SetFilePointer
ReadFile
CloseHandle
DeleteFileA
MoveFileExA
Sleep
GetSystemDirectoryA
SetFileAttributesA
GetTickCount
lstrcatA
GetCurrentProcess

user32

wsprintfA

advapi32

CloseServiceHandle
ControlService
DeleteService
StartServiceA
OpenSCManagerA
CreateServiceA
RegCreateKeyExA
RegSetValueExA
RegOpenKeyExA
RegCloseKey
OpenServiceA

msvcrt

__setusermatherr
_except_handler3
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
_itoa
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp

iphlpapi

GetAdaptersInfo

psapi

GetMappedFileNameW

Sections

rwbgmrwb
Size: 1.3MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

hmrwch
Size: 32B - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

4a0772cf53bf4fe4ca3a1d2bc74fb6ef

Headers

File Characteristics

Imports

msvcrt

kernel32

user32

advapi32

msvcrt

iphlpapi

psapi

Sections

rwbgmrwb Size: 1.3MB - Virtual size: 1.4MB

hmrwch Size: 32B - Virtual size: 84KB

rwbgmrwb
Size: 1.3MB - Virtual size: 1.4MB

hmrwch
Size: 32B - Virtual size: 84KB