ce2814b9170d62f21ff6d4cac60de2e9_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

ce2814b9170d62f21ff6d4cac60de2e9_JaffaCakes118
Size

324KB
MD5

ce2814b9170d62f21ff6d4cac60de2e9
SHA1

12abbd5dc349c519099dd70f0b501734026bfa42
SHA256

7f3c0c3d5b05b378ae7a1b54ed91992d2faeb387e7525fbc08317a7bc581d1c2
SHA512

502f8172781db9dd67b464ae6324e61ecbd484cab01a021b2e9a4f11866ceaedcd040e1491c289b1972406861488883273eb397b2c703594b18df2de9d803c46
SSDEEP

3072:ejFf6+nnMPot0+I3pprBWrtlv7jScoDAdE8/KKwlsQLSxAtL5T8OTo4t:epCdPoxqTYvd/KZlsUSxAL4OTo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ce2814b9170d62f21ff6d4cac60de2e9_JaffaCakes118

Files

ce2814b9170d62f21ff6d4cac60de2e9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

776389746f20cfbe1dba06e9724f4377

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

CoCreateInstance
CLSIDFromString
CoInitialize
OleInitialize
OleSetContainedObject

advapi32

SetServiceStatus
RegCloseKey
RegOpenKeyExA
RegQueryValueExA
AllocateAndInitializeSid
FreeSid
QueryServiceStatus
OpenThreadToken
OpenServiceA
OpenSCManagerA
LookupPrivilegeValueW
GetTokenInformation
DeleteService
CreateServiceA
SetSecurityDescriptorDacl
SetEntriesInAclA
RegisterServiceCtrlHandlerA
RegSetValueExA
RegEnumKeyA
InitializeSecurityDescriptor
StartServiceCtrlDispatcherA
OpenProcessToken

xolehlp

DtcGetTransactionManagerExA

kernel32

LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetCommandLineA
SetConsoleCtrlHandler
ReadFile
SetStdHandle
CreateDirectoryA
DeleteFileA
ResetEvent
VirtualFree
VirtualAlloc
GetProfileStringW
lstrlenA
GetTempPathA
MultiByteToWideChar
RtlUnwind
GetModuleHandleA
GetStartupInfoA
GetVersion
ExitProcess
RaiseException
HeapFree
TerminateProcess
GetCurrentProcess
HeapReAlloc
HeapAlloc
HeapSize
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
WriteFile
GetLastError
FlushFileBuffers
SetFilePointer
CloseHandle
SetUnhandledExceptionFilter
IsBadWritePtr
IsBadReadPtr
IsBadCodePtr
GetCPInfo
GetACP
GetOEMCP
GetProcAddress
LoadLibraryA

Sections

.text
Size: 76KB - Virtual size: 74KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 48KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 180KB - Virtual size: 928KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sxdata
Size: 4KB - Virtual size: 404B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

776389746f20cfbe1dba06e9724f4377

Headers

File Characteristics

Imports

ole32

advapi32

xolehlp

kernel32

Sections

.text Size: 76KB - Virtual size: 74KB

.rdata Size: 48KB - Virtual size: 46KB

.data Size: 180KB - Virtual size: 928KB

.idata Size: 4KB - Virtual size: 3KB

.sxdata Size: 4KB - Virtual size: 404B

.reloc Size: 8KB - Virtual size: 6KB

.text
Size: 76KB - Virtual size: 74KB

.rdata
Size: 48KB - Virtual size: 46KB

.data
Size: 180KB - Virtual size: 928KB

.idata
Size: 4KB - Virtual size: 3KB

.sxdata
Size: 4KB - Virtual size: 404B

.reloc
Size: 8KB - Virtual size: 6KB