cfa0d4baf3479a00360752f428b024dc_JaffaCakes118

General

Target

cfa0d4baf3479a00360752f428b024dc_JaffaCakes118
Size

111KB
MD5

cfa0d4baf3479a00360752f428b024dc
SHA1

f65ea151014639cf32838d30cfd353fadf2522ad
SHA256

297506e41c784cffc6c9ae9090bec017835493b912400265102ce6a535c62bca
SHA512

b2556b2bce59a97da7d4a0d7e0b4c9158d3c74a80d6fe8a0fad6ff63c28f6ff10b73817ab91b1a90a02f3e7e08dc0b99fdb007331da58fa6b9b1496f577d34d5
SSDEEP

3072:4+f+23qAfAM2V7K9R6wJjU+H2GH0RF4t+vas:4+f+eq0SxwtU5GHsGt+P

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cfa0d4baf3479a00360752f428b024dc_JaffaCakes118

Files

cfa0d4baf3479a00360752f428b024dc_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6cdafea934ff4ec7fcf459c9e1cd3842

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA
GetCurrentThreadId
OutputDebugStringA
GetFileTime
lstrcatA
WritePrivateProfileStringA
DeleteFileA
FreeResource
lstrlenA
CreateMutexA
SetFileTime
LocalFileTimeToFileTime
GetTempPathA
GetFileAttributesA
lstrcmpA
SetLastError
LocalReAlloc
LocalFree
LocalAlloc
GetLastError
ReleaseMutex
GetModuleFileNameA
CreateFileA
SetFilePointer
ReadFile
Sleep
GetSystemDirectoryA
CopyFileA
GetVersion
LoadLibraryA
GetProcAddress
FreeLibrary
CreateRemoteThread
WaitForSingleObject
OpenProcess
CreateToolhelp32Snapshot
Process32First
Process32Next
GetCurrentProcess
CloseHandle
WriteFile
GetTickCount

user32

wsprintfA
GetInputState
PostThreadMessageA
GetMessageA
MessageBoxA

advapi32

OpenServiceA
CloseServiceHandle
StartServiceA
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
RegQueryValueExA
RegSetValueExA
RegCloseKey
RegOpenKeyExA
RegCreateKeyExA
CreateServiceA
EnumServicesStatusA
QueryServiceConfigA
UnlockServiceDatabase
ChangeServiceConfigA
LockServiceDatabase
OpenSCManagerA

msvcrt

_strlwr
__dllonexit
_onexit
??1type_info@@UAE@XZ
__CxxFrameHandler
??3@YAXPAX@Z
rand
realloc
malloc
strncmp
strtoul
isdigit
rename
sprintf
??2@YAPAXI@Z
strchr
strstr
fclose
fread
fseek
fopen
exit

Sections

.data
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

6cdafea934ff4ec7fcf459c9e1cd3842

Headers

File Characteristics

Imports

kernel32

user32

advapi32

msvcrt

Sections

.data Size: 12KB - Virtual size: 12KB

.CRT Size: 512B - Virtual size: 4B

.data
Size: 12KB - Virtual size: 12KB

.CRT
Size: 512B - Virtual size: 4B