b21f764063540e5a0cd440080b7662cc_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

b21f764063540e5a0cd440080b7662cc_JaffaCakes118
Size

40KB
MD5

b21f764063540e5a0cd440080b7662cc
SHA1

b997eb3f68af55b89feb12aba9afd859d0139c69
SHA256

2f09f8c720a0c89b80d85b35206164cd1fb8c01705b78d3b1d71355378302754
SHA512

2b7c4d193935796550966cd37d2d24ff5219fa63480a97c84fc39697907cd4cb9dd6dc5ffd635b6148e2009487dc95b0dc7e067c39ea24edc9053896e53d0da5
SSDEEP

384:uFkEp0Jbu3jXjQgBMFd9/wUN/OLUH2axJ4oiWjf4Yf0KZMY6d5eRJIE/KzUmi56l:ufIQBMFd9ImvWaxLi65ZMx5Y6Um/abK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b21f764063540e5a0cd440080b7662cc_JaffaCakes118

Files

b21f764063540e5a0cd440080b7662cc_JaffaCakes118
.exe windows:4 windows x86 arch:x86

060161ef625d7832997652be7adcecd2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

SetServiceStatus
DeregisterEventSource
ReportEventA
RegisterEventSourceA
RegisterServiceCtrlHandlerA
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
StartServiceCtrlDispatcherA

msvcrt

_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
__p___initenv
_XcptFilter
_exit
??1type_info@@UAE@XZ
_onexit
__dllonexit
_ltoa
getenv
tolower
exit
??2@YAPAXI@Z
_winmajor
_CxxThrowException
__CxxFrameHandler
time
ctime
fseek
fprintf
vfprintf
fflush
fclose
??3@YAXPAX@Z
fopen
_controlfp

msvcirt

??6ostream@@QAEAAV0@P6AAAV0@AAV0@@Z@Z
?cout@@3Vostream_withassign@@A
??6ostream@@QAEAAV0@PBD@Z
?endl@@YAAAVostream@@AAV1@@Z

msvcp60

??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
?length@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDABV?$allocator@D@1@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDIABV?$allocator@D@1@@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
?size@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$allocator@D@1@@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ

kernel32

LoadLibraryA
FreeLibrary
ExitThread
ExpandEnvironmentStringsA
SetEnvironmentVariableA
ResumeThread
GetCurrentProcess
SetPriorityClass
SetConsoleCtrlHandler
CreateThread
CreateEventA
WaitForSingleObject
Sleep
GetExitCodeProcess
CreateProcessA
GetModuleHandleA
GetProcAddress
TerminateProcess
CloseHandle
TerminateThread
FormatMessageA
GetLastError
GetCurrentThreadId

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

060161ef625d7832997652be7adcecd2

Headers

File Characteristics

Imports

advapi32

msvcrt

msvcirt

msvcp60

kernel32

Sections

.text Size: 16KB - Virtual size: 15KB

.rdata Size: 8KB - Virtual size: 4KB

.data Size: 4KB - Virtual size: 8KB

.rsrc Size: 8KB - Virtual size: 7KB

.text
Size: 16KB - Virtual size: 15KB

.rdata
Size: 8KB - Virtual size: 4KB

.data
Size: 4KB - Virtual size: 8KB

.rsrc
Size: 8KB - Virtual size: 7KB