a5b9a48304faf96ce8c54fca81efa894_JaffaCakes118

General

Target

a5b9a48304faf96ce8c54fca81efa894_JaffaCakes118
Size

49KB
MD5

a5b9a48304faf96ce8c54fca81efa894
SHA1

f208c84d36164b9cf7b825eea34ee1e9f58ec9d6
SHA256

d95f9ed735ec589c071ed9c7cf6c50a9ba10cfdade8d44bb2fc349836965580e
SHA512

461a68bfc851b3b596b5b4dbcf918e1d5fe159ad9a81c6e78d51380208bda19cb65874c679aa9ea646f51ecd8215e28a75b8937ce33e7ae8d6c922c1df85d967
SSDEEP

768:AOcglWDFqMWli4S4Rt1lvIW7PHLxCj0jRAtRZKmEacOE0gWBr1k5rnzK:hl8FqMWl9TlvnrxCj0F6RZtcOE0gg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a5b9a48304faf96ce8c54fca81efa894_JaffaCakes118

Files

a5b9a48304faf96ce8c54fca81efa894_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8a1abccd947588e0c4ab5072cc0e553c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Process32First
CreateToolhelp32Snapshot
WriteFile
CreateFileA
MoveFileExA
CopyFileA
GetTempPathA
GetSystemDirectoryA
Sleep
ExitProcess
DeleteFileA
MoveFileA
SetFileTime
LocalFileTimeToFileTime
SystemTimeToFileTime
lstrlenA
lstrcatA
lstrcpyA
Process32Next
SetLastError
GetFileAttributesA
ResumeThread
CreateProcessA
SetThreadPriority
GetCurrentThread
SetPriorityClass
GetCurrentProcess
SetFileAttributesA
GetEnvironmentVariableA
GetShortPathNameA
GetModuleFileNameA
VirtualQuery
SetUnhandledExceptionFilter
ReleaseMutex
CreateMutexA
GetStringTypeA
LCMapStringW
CloseHandle
GetModuleHandleA
GlobalAlloc
LoadLibraryExA
GlobalFree
FreeLibrary
lstrcpynA
GetProcAddress
GetProcessHeap
HeapAlloc
HeapFree
DeviceIoControl
lstrcmpiA
GetLastError
LCMapStringA
MultiByteToWideChar
LoadLibraryA
GetStartupInfoA
GetCommandLineA
GetVersion
TerminateProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
RtlUnwind
VirtualAlloc
HeapReAlloc
GetCPInfo
GetACP
GetOEMCP
GetStringTypeW

user32

wsprintfA

advapi32

RegCreateKeyA
ChangeServiceConfig2A
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegSetValueExA
OpenSCManagerA
OpenServiceA
CloseServiceHandle
QueryServiceStatus
StartServiceA
ControlService
CreateServiceA

shlwapi

PathFileExistsA

Sections

.text
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 533KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

8a1abccd947588e0c4ab5072cc0e553c

Headers

File Characteristics

Imports

kernel32

user32

advapi32

shlwapi

Sections

.text Size: 16KB - Virtual size: 16KB

.rdata Size: 3KB - Virtual size: 3KB

.data Size: 28KB - Virtual size: 533KB

.text
Size: 16KB - Virtual size: 16KB

.rdata
Size: 3KB - Virtual size: 3KB

.data
Size: 28KB - Virtual size: 533KB