a73b416c0872e96c264d2cdd1d6fc27c_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

a73b416c0872e96c264d2cdd1d6fc27c_JaffaCakes118
Size

414KB
MD5

a73b416c0872e96c264d2cdd1d6fc27c
SHA1

b18469bed9e020450c4f9f022a9c434b0492fa79
SHA256

561f245d9439542f202b18e7b2c0f1da728e7f17b3bf96d55b910c8478118cc4
SHA512

19bea0e43a19aa9ad03de8f6973dd23a6e5620c65250425ee04903b56e9eff209fcbace423cc219ec33dc984227c5a48e1a4832fc23ac3801acda69776353e2f
SSDEEP

6144:q6LL9wBavwjz+yhr+1K2Mw1wKtgNeHjOvtrcu4um:q6LL9wBavwj6yhwMw1w1AOVAu4N

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a73b416c0872e96c264d2cdd1d6fc27c_JaffaCakes118

Files

a73b416c0872e96c264d2cdd1d6fc27c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b7898354a03d042a53bc46cdacac785b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindClose
FindNextFileA
GetComputerNameA
GetWindowsDirectoryA
CompareStringW
CompareStringA
LCMapStringW
WinExec
Sleep
CopyFileA
GetTempPathA
GetTempFileNameA
FindFirstFileA
GetModuleHandleA
CreateEventA
GetModuleFileNameA
IsBadWritePtr
IsBadReadPtr
HeapValidate
GetTimeZoneInformation
GetSystemTime
GetLocalTime
RtlUnwind
ExitProcess
TerminateProcess
GetCurrentProcess
GetCommandLineA
GetVersion
GetLastError
CloseHandle
WriteFile
ReadFile
SetFilePointer
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
CreateFileA
DebugBreak
InterlockedDecrement
OutputDebugStringA
GetProcAddress
LoadLibraryA
InterlockedIncrement
HeapAlloc
HeapReAlloc
HeapFree
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
SetConsoleCtrlHandler
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetStdHandle
FlushFileBuffers
SetEndOfFile
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
SetUnhandledExceptionFilter
IsBadCodePtr
GetCPInfo
GetACP
GetOEMCP
LCMapStringA
SetEnvironmentVariableA

user32

ShowWindow
FindWindowA

advapi32

OpenSCManagerA
OpenServiceA
CloseServiceHandle
CreateServiceA
StartServiceA
RegisterServiceCtrlHandlerA
SetServiceStatus
StartServiceCtrlDispatcherA

Sections

.text
Size: 184KB - Virtual size: 182KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b7898354a03d042a53bc46cdacac785b

Headers

File Characteristics

Imports

kernel32

user32

advapi32

Sections

.text Size: 184KB - Virtual size: 182KB

.rdata Size: 12KB - Virtual size: 9KB

.data Size: 8KB - Virtual size: 14KB

.idata Size: 4KB - Virtual size: 2KB

.reloc Size: 8KB - Virtual size: 5KB

.text
Size: 184KB - Virtual size: 182KB

.rdata
Size: 12KB - Virtual size: 9KB

.data
Size: 8KB - Virtual size: 14KB

.idata
Size: 4KB - Virtual size: 2KB

.reloc
Size: 8KB - Virtual size: 5KB