a9574da58d5cbf6052d462c911a89850_JaffaCakes118

General

Target

a9574da58d5cbf6052d462c911a89850_JaffaCakes118
Size

124KB
MD5

a9574da58d5cbf6052d462c911a89850
SHA1

d3c324ec0348b5fda99722399393d74bf6abc4d8
SHA256

c04f3391cb62306d10803e6885ca60696b5a2314ac4bef2df3b7da5be1bc597a
SHA512

25362602a5a7bd436c17926ee9b85f752992c45b97159a8de8c0889ca75bf9fff270eb90d62e3b6c5ff571a612e1dac5480fbd67fd7fe17d87558728bce68bc9
SSDEEP

1536:2zfuylCzVoKQIhkAy20a3Gyw05bICzT+dTcQtmD+YYoQ1VR:cV+VoN+kL20a3Gyw05n0PYYoQ1VR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a9574da58d5cbf6052d462c911a89850_JaffaCakes118

Files

a9574da58d5cbf6052d462c911a89850_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a6b8402b286557b7897e5833c1bcf00f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
GetSystemDirectoryA
DeleteFileA
WinExec
Sleep
ResumeThread
CreateProcessA
SetThreadPriority
FindResourceA
SetPriorityClass
GetCurrentProcess
lstrcatA
lstrcpyA
GetEnvironmentVariableA
GetShortPathNameA
GetModuleFileNameA
SizeofResource
LoadResource
GlobalAlloc
LockResource
CreateFileA
WriteFile
CloseHandle
GlobalFree
SetLastError
GetCurrentThread
lstrlenA
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
ExitProcess
TerminateProcess
RtlUnwind
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
VirtualAlloc
HeapReAlloc
GetProcAddress
LoadLibraryA
GetStringTypeW

advapi32

CreateServiceA
RegOpenKeyExA
RegCreateKeyA
RegSetValueExA
RegOpenKeyA
RegCloseKey
RegQueryValueExA
StartServiceA
CloseServiceHandle
OpenSCManagerA

shell32

SHFileOperationA

shlwapi

PathFileExistsA

Sections

.text
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 96KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a6b8402b286557b7897e5833c1bcf00f

Headers

File Characteristics

Imports

kernel32

advapi32

shell32

shlwapi

Sections

.text Size: 16KB - Virtual size: 13KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 4KB - Virtual size: 3KB

.rsrc Size: 96KB - Virtual size: 92KB

.text
Size: 16KB - Virtual size: 13KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 4KB - Virtual size: 3KB

.rsrc
Size: 96KB - Virtual size: 92KB