b8b4e4e9cf9efcc3c988331dfacc4f8a_JaffaCakes118

General

Target

b8b4e4e9cf9efcc3c988331dfacc4f8a_JaffaCakes118
Size

11KB
MD5

b8b4e4e9cf9efcc3c988331dfacc4f8a
SHA1

2b5b70b4e38b02281a3176f4d0788f732becd693
SHA256

f670f2d1f16dc2f5c9afc01bf22574d3dec315e45b2224212cc2163fe472e2fb
SHA512

c2a7f2c99823b50364a961bbad27d62ba812091bb7f20e2ebad46fad3ed8d748987a60350dce13551126fbf12c53dcddf8ac1fc2e5a894c0ca4fedd2049a56ce
SSDEEP

192:YT0OR2eRa+mLtOxiNDz6GYEBx1l0lRHRO+OxKXZ81AZDr4Fg:YgOweQ4K1l0lRcxKXkA58

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b8b4e4e9cf9efcc3c988331dfacc4f8a_JaffaCakes118

Files

b8b4e4e9cf9efcc3c988331dfacc4f8a_JaffaCakes118
.dll windows:4 windows x86 arch:x86

25d39496093785c42f0a6dcb83853b07

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetLastError
CloseHandle
DeviceIoControl
GlobalFree
LoadLibraryExA
GlobalAlloc
FreeLibrary
WriteFile
WriteProcessMemory
VirtualProtectEx
OpenProcess
GetCurrentProcessId
LoadLibraryA
GetProcAddress
CreateThread
Sleep
GetSystemDirectoryA
lstrcatA
ExitProcess
CreateFileA
GetModuleHandleA

user32

MessageBoxA

advapi32

StartServiceA
DeleteService
CloseServiceHandle
OpenSCManagerA
CreateServiceA
OpenServiceA
ControlService
QueryServiceStatus

msvcrt

_initterm
__CxxFrameHandler
??3@YAXPAX@Z
free
malloc
_adjust_fdiv

Exports

Exports

WahCloseApcHelper
WahCloseHandleHelper
WahCloseNotificationHandleHelper
WahCloseSocketHandle
WahCloseThread
WahCompleteRequest
WahCreateHandleContextTable
WahCreateNotificationHandle
WahCreateSocketHandle
WahDestroyHandleContextTable
WahDisableNonIFSHandleSupport
WahEnableNonIFSHandleSupport
WahEnumerateHandleContexts
WahInsertHandleContext
WahNotifyAllProcesses
WahOpenApcHelper
WahOpenCurrentThread
WahOpenHandleHelper
WahOpenNotificationHandleHelper
WahQueueUserApc
WahReferenceContextByHandle
WahRemoveHandleContext
WahWaitForNotification

Sections

.data
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 494B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

25d39496093785c42f0a6dcb83853b07

Headers

File Characteristics

Imports

kernel32

user32

advapi32

msvcrt

Exports

Exports

Sections

.data Size: 9KB - Virtual size: 9KB

.reloc Size: 512B - Virtual size: 494B

.data
Size: 9KB - Virtual size: 9KB

.reloc
Size: 512B - Virtual size: 494B