a53a6eee8a9112d64fbd0ce387fca54f_JaffaCakes118

General

Target

a53a6eee8a9112d64fbd0ce387fca54f_JaffaCakes118
Size

121KB
MD5

a53a6eee8a9112d64fbd0ce387fca54f
SHA1

0fc9a171353696c7bfe21179191726085108ffc7
SHA256

0e11133e4a5f3c32c6d1fa5fb48ff9e2d09fbd30bf2e7d3a0224c8e3b5fd5c94
SHA512

914b41f003806c530eedb06b9b5461af10820badf0200ef3a0b40e53307c2f47306317a98ad318d5944826d8f72194621c83a7289fd7f75ebce0e8e0624bfea0
SSDEEP

3072:fe+gK/zsr2FicAGwvZ9uWh8mNu2tl0ZM+:RgK7K2FiOwvZ9SaTl0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a53a6eee8a9112d64fbd0ce387fca54f_JaffaCakes118

Files

a53a6eee8a9112d64fbd0ce387fca54f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

52fde90daa8d7bb799386876bc9c4fc4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleW
GetLastError
GetVersionExW
SetErrorMode
GetModuleHandleA
FormatMessageW
LocalAlloc
LocalFree
lstrlenA
lstrcpyA
LoadLibraryW
GetProcAddress
GetTempPathW
MultiByteToWideChar
WideCharToMultiByte
GetSystemDirectoryW
lstrcpyW
GetModuleFileNameW
GetLocalTime
GetComputerNameW
GetCurrentDirectoryW
SetCurrentDirectoryW
GetShortPathNameW
WinExec
GetStartupInfoA
lstrlenW

advapi32

RegCreateKeyExW
RegQueryValueExW
RegQueryValueExA
RegSetValueExW
CloseServiceHandle
StartServiceW
OpenServiceW
CreateServiceW
OpenSCManagerW
RegCloseKey

shlwapi

StrStrA
StrRChrW

wsock32

closesocket
send
connect
htons
socket
WSAStartup
shutdown

msvcrt

__dllonexit
_onexit
_controlfp
free
??0exception@@QAE@ABQBD@Z
??0exception@@QAE@ABV0@@Z
__set_app_type
strlen
_CxxThrowException
??2@YAPAXI@Z
memcpy
memset
__CxxFrameHandler
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
_except_handler3
??1type_info@@UAE@XZ
??1exception@@UAE@XZ

user32

wsprintfW

Sections

.text
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 40KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

52fde90daa8d7bb799386876bc9c4fc4

Headers

File Characteristics

Imports

kernel32

advapi32

shlwapi

wsock32

msvcrt

user32

Sections

.text Size: 36KB - Virtual size: 35KB

.rdata Size: 21KB - Virtual size: 21KB

.data Size: 40KB - Virtual size: 40KB

.rsrc Size: 22KB - Virtual size: 22KB

.text
Size: 36KB - Virtual size: 35KB

.rdata
Size: 21KB - Virtual size: 21KB

.data
Size: 40KB - Virtual size: 40KB

.rsrc
Size: 22KB - Virtual size: 22KB