cf116ca8527a8431505fb526ef8d439e_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

cf116ca8527a8431505fb526ef8d439e_JaffaCakes118
Size

1.3MB
MD5

cf116ca8527a8431505fb526ef8d439e
SHA1

7285bfcec0f9dcff9bb83336545b3d42a3955499
SHA256

b770d75e6747cc586ba039f6d20b9d9b97f9909cba6a794f1b7051f2ea4169dc
SHA512

19ba4c0fe2ce5fc098a3362b733e8828cdadd4e0b6839e1f7b250fd66b0d82c92d1ded4a32ad782fb71f214918003f159e604bf089f7e13e7f6d96e246207095
SSDEEP

24576:TxfcZzbDo4mejwdy6XLKmyWlnhSr2eo+25jKfFElwZqPXdkUBCyjqzh2Tzs4kdt:t0ZD9EdywryCh9qiKfJwPdFCEqzh2m7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cf116ca8527a8431505fb526ef8d439e_JaffaCakes118

Files

cf116ca8527a8431505fb526ef8d439e_JaffaCakes118
.exe windows:5 windows x86 arch:x86

935a1258599ab73724d9312b80e834f0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetFileAttributesA �A

kernel32

CreateProcessA
SetThreadPriority
GetCurrentThread
SetPriorityClass
ResumeThread
GetEnvironmentVariableA
GetShortPathNameA
GetStartupInfoA
GetTempPathA
FindResourceA
LoadResource
GetModuleHandleA
CreateFileA
SystemTimeToFileTime
LocalFileTimeToFileTime
SetFileTime
SizeofResource
WriteFile
GetModuleFileNameA
SetFilePointer
ReadFile
CloseHandle
DeleteFileA
MoveFileExA
Sleep
GetSystemDirectoryA
SetFileAttributesA
GetTickCount
lstrcatA
GetCurrentProcess

user32

wsprintfA

advapi32

CloseServiceHandle
ControlService
DeleteService
StartServiceA
OpenSCManagerA
CreateServiceA
RegCreateKeyExA
RegSetValueExA
RegOpenKeyExA
RegCloseKey
OpenServiceA

msvcrt

__setusermatherr
_except_handler3
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
_itoa
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp

iphlpapi

GetAdaptersInfo

psapi

GetMappedFileNameW

Sections

jouz
Size: 1.3MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

ejp
Size: 32B - Virtual size: 372KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

uzekpu
Size: 32B - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

zfkp
Size: 32B - Virtual size: 272KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

uaf
Size: 32B - Virtual size: 284KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

kpvafk
Size: 64B - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

qvafl
Size: 64B - Virtual size: 296KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

935a1258599ab73724d9312b80e834f0

Headers

File Characteristics

Imports

kernel32

kernel32

user32

advapi32

msvcrt

iphlpapi

psapi

Sections

jouz Size: 1.3MB - Virtual size: 1.6MB

ejp Size: 32B - Virtual size: 372KB

uzekpu Size: 32B - Virtual size: 72KB

zfkp Size: 32B - Virtual size: 272KB

uaf Size: 32B - Virtual size: 284KB

kpvafk Size: 64B - Virtual size: 48KB

qvafl Size: 64B - Virtual size: 296KB

jouz
Size: 1.3MB - Virtual size: 1.6MB

ejp
Size: 32B - Virtual size: 372KB

uzekpu
Size: 32B - Virtual size: 72KB

zfkp
Size: 32B - Virtual size: 272KB

uaf
Size: 32B - Virtual size: 284KB

kpvafk
Size: 64B - Virtual size: 48KB

qvafl
Size: 64B - Virtual size: 296KB