ce74e1649301b8584c4213d7504cb1bd_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

ce74e1649301b8584c4213d7504cb1bd_JaffaCakes118
Size

74KB
MD5

ce74e1649301b8584c4213d7504cb1bd
SHA1

9553d4ab93f03cb95f23011b07a2d4a0a4b70f6e
SHA256

44678005236e657e8178163ad44a7f825015b1033d957473d8e013b72e3056fc
SHA512

1aba07f61eab6c9a0a78e26b97efe891faca06b735c210f7e29364369b6970440e404232b32e54e3750308acabae6a191956c3446e7186cfb84ac5f003647319
SSDEEP

1536:lGKRP0acLckoXO3vr2h0JVfrhhbmSGdzPpztThrisKldR:UKR8acLcbO3Ch0J5r/mXtpztThQV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ce74e1649301b8584c4213d7504cb1bd_JaffaCakes118

Files

ce74e1649301b8584c4213d7504cb1bd_JaffaCakes118
.exe windows:4 windows x86 arch:x86

514770f0984f17ca8129b36370696e4c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

setupapi

SetupDiCallClassInstaller
SetupDiDestroyDeviceInfoList
SetupDiClassGuidsFromNameA
SetupDiGetClassDevsA
SetupDiEnumDeviceInfo
SetupDiGetDeviceRegistryPropertyA
SetupDiSetClassInstallParamsA

advapi32

OpenServiceA
InitializeSecurityDescriptor
RegDeleteKeyA
RegDeleteValueA
RegCreateKeyExA
RegOpenKeyExA
RegSetValueExA
RegCloseKey
StartServiceCtrlDispatcherA
RegisterServiceCtrlHandlerA
SetServiceStatus
DeregisterEventSource
ReportEventA
RegisterEventSourceA
StartServiceA
CloseServiceHandle
CreateServiceA
OpenSCManagerA
DeleteService
QueryServiceStatus
ControlService
ConvertStringSecurityDescriptorToSecurityDescriptorA

rpcrt4

NdrServerCall2
RpcServerRegisterIf
RpcMgmtStopServerListening
RpcServerUnregisterIf
RpcServerUseProtseqEpA
RpcServerRegisterAuthInfoA
RpcServerListen

shlwapi

SHDeleteKeyA

kernel32

SetStdHandle
EnterCriticalSection
FlushFileBuffers
GetStringTypeW
GetStringTypeA
SetFilePointer
RtlUnwind
GetLastError
GetModuleFileNameA
Sleep
SetConsoleCtrlHandler
LocalFree
lstrlenA
FormatMessageA
CloseHandle
CreateNamedPipeA
CreateEventA
SetEvent
ExitProcess
TerminateProcess
GetCurrentProcess
IsBadWritePtr
IsBadReadPtr
HeapValidate
GetCommandLineA
GetVersion
LeaveCriticalSection
DebugBreak
GetStdHandle
WriteFile
InterlockedDecrement
OutputDebugStringA
GetProcAddress
LoadLibraryA
InterlockedIncrement
InitializeCriticalSection
DeleteCriticalSection
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
HeapReAlloc
HeapFree
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
WideCharToMultiByte
MultiByteToWideChar
LCMapStringA
LCMapStringW
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
GetCurrentThreadId
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue

Sections

.text
Size: 44KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

514770f0984f17ca8129b36370696e4c

Headers

File Characteristics

Imports

setupapi

advapi32

rpcrt4

shlwapi

kernel32

Sections

.text Size: 44KB - Virtual size: 42KB

.rdata Size: 8KB - Virtual size: 7KB

.data Size: 8KB - Virtual size: 10KB

.rsrc Size: 10KB - Virtual size: 10KB

.text
Size: 44KB - Virtual size: 42KB

.rdata
Size: 8KB - Virtual size: 7KB

.data
Size: 8KB - Virtual size: 10KB

.rsrc
Size: 10KB - Virtual size: 10KB