a239fdbb05f2476abccc720fa8b5dbb6_JaffaCakes118

General

Target

a239fdbb05f2476abccc720fa8b5dbb6_JaffaCakes118
Size

63KB
MD5

a239fdbb05f2476abccc720fa8b5dbb6
SHA1

44814d47004c9091514fad412249500f1f073fbe
SHA256

95f8e7f45e2a735672f76cbd355f4909a198f39cba752dfbb5d20f376d3b317d
SHA512

372d354b2c636f086282c971ca7a9b35d4163567444659755806222e569d7112a5e6454ccc23c618d26dd5e6a129f7e2b45cf602a8c0458986ca81e5344f58ef
SSDEEP

768:9CEbSVFa0wh8ff8p8PqGvDgi2qvdxnacva8/0ah/mV/nV/4V/n:92a0Sc8p8P7vD2gJacD0nVe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a239fdbb05f2476abccc720fa8b5dbb6_JaffaCakes118

Files

a239fdbb05f2476abccc720fa8b5dbb6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c882e1e107b9f0ae83872a4f31e49e70

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetProcessHeap
GetTickCount
SetErrorMode
GetCommandLineA
CreateMutexA
GetLastError
GetSystemTimeAsFileTime
CreateThread
HeapFree
HeapAlloc
ExitProcess
WriteFile
CloseHandle
GetSystemDirectoryA
CreateProcessA
GetThreadContext
GetThreadSelectorEntry
ReadProcessMemory
VirtualProtect
WriteProcessMemory
ResumeThread
GetModuleHandleA
CreateFileA
Sleep
lstrlenA
SetFileTime
SetFilePointer
CopyFileA
GetFileTime
lstrcatA
GetWindowsDirectoryA
FreeLibrary
DeleteFileA
MoveFileExA
LoadLibraryA
GetProcAddress
GetVersion
FindFirstFileA
FindNextFileA
FindClose
GetModuleFileNameA
ReadFile
lstrcpyA
GetComputerNameA

wininet

InternetReadFile
InternetOpenUrlA
InternetCloseHandle
InternetOpenA

shell32

ShellExecuteA

ws2_32

htons
htonl
setsockopt
closesocket
WSAStartup
recv
send
connect
bind
socket
inet_ntoa
ntohl
gethostbyname

user32

wsprintfA

advapi32

ControlService
ChangeServiceConfigA
CloseServiceHandle
OpenSCManagerA
OpenServiceA
RegSetValueExA
RegCreateKeyExA
RegQueryValueExA
RegCloseKey

shlwapi

SHSetValueA

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 44B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

c882e1e107b9f0ae83872a4f31e49e70

Headers

File Characteristics

Imports

kernel32

wininet

shell32

ws2_32

user32

advapi32

shlwapi

Sections

.text Size: 11KB - Virtual size: 11KB

.data Size: 44B - Virtual size: 3KB

.text
Size: 11KB - Virtual size: 11KB

.data
Size: 44B - Virtual size: 3KB