b0b79620ad8fd2b8eb318a577df6e9c0_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

b0b79620ad8fd2b8eb318a577df6e9c0_JaffaCakes118
Size

41KB
MD5

b0b79620ad8fd2b8eb318a577df6e9c0
SHA1

b78fffa85b83f10a5fee3d161377a2c40bc882e4
SHA256

62eecd84906a9c601786187670e80715a9e71784334c631a2119a0b4b8a7898f
SHA512

c2fc9d61bcfe8642b30169e93811d879a973e7612a4bb986648187dbf3e7b79935bedd3cb4d1bbfa8214e638da4aa53cc12e67cf030eadc9efff4dc091083f4e
SSDEEP

768:1IEmFxyKsNv1xkYA4TR5i0nbvwC82/ZPAggG3frZ3A+ZB:1IrHfsXkQLi0bY32/agg0frZA+j

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b0b79620ad8fd2b8eb318a577df6e9c0_JaffaCakes118

Files

b0b79620ad8fd2b8eb318a577df6e9c0_JaffaCakes118
.exe windows:6 windows x86 arch:x86

609c7a2044aa9e060323f8209fc77212

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemTime
GetVersionExA
ConnectNamedPipe
CreateWaitableTimerA
WaitForSingleObjectEx
GetSystemDirectoryA
GetTickCount
DisconnectNamedPipe
SuspendThread
ResumeThread
SetEvent
CreateEventA
CreateNamedPipeA
CreateThread
WaitForSingleObject
lstrlenA
CreateFileA
DeviceIoControl
GetLastError
SetFilePointer
WriteFile
SetWaitableTimer
WaitForMultipleObjectsEx
HeapFree
GetEnvironmentStringsW
GetEnvironmentStrings
CloseHandle
ReadFile
HeapAlloc
GetCommandLineA
GetVersion
ExitProcess
HeapDestroy
HeapCreate
VirtualFree
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
VirtualAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
MultiByteToWideChar
FreeEnvironmentStringsW
FlushFileBuffers
SetStdHandle
WideCharToMultiByte
GetCPInfo
GetACP
GetOEMCP
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetCurrentThreadId
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue
RtlUnwind
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetProcAddress
LoadLibraryA

user32

wsprintfA

advapi32

RegCloseKey
ControlService
DeleteService
OpenSCManagerA
CreateServiceA
CloseServiceHandle
OpenServiceA
QueryServiceStatus
StartServiceA
RegisterEventSourceA
ReportEventA
DeregisterEventSource
SetServiceStatus
RegisterServiceCtrlHandlerA
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
StartServiceCtrlDispatcherA
RegQueryValueExA
RegOpenKeyExA

Sections

.text
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

609c7a2044aa9e060323f8209fc77212

Headers

File Characteristics

Imports

kernel32

user32

advapi32

Sections

.text Size: 22KB - Virtual size: 22KB

.rdata Size: 3KB - Virtual size: 3KB

.data Size: 11KB - Virtual size: 16KB

.rsrc Size: 3KB - Virtual size: 2KB

.text
Size: 22KB - Virtual size: 22KB

.rdata
Size: 3KB - Virtual size: 3KB

.data
Size: 11KB - Virtual size: 16KB

.rsrc
Size: 3KB - Virtual size: 2KB