d2b28b06e70f31738ae1ed17a1563599_JaffaCakes118

General

Target

d2b28b06e70f31738ae1ed17a1563599_JaffaCakes118
Size

126KB
MD5

d2b28b06e70f31738ae1ed17a1563599
SHA1

6b23fa2559a4e018acd68582227bb8eea47f9bd2
SHA256

d41867527545311e4ad65f7d9de9e8bf8ed8a88eb23182f8b68765cfc78d1f06
SHA512

487f72e54c20b14e606df3ad2ef9213a04986af031492460e4356ec88a457939667363353dc28c30709d0e33fc2d2bc7b4bb8d77cf722ce9e18035ded31c098f
SSDEEP

3072:XU+pJH17LyR4IvCjH5z4yAreahjJr5UpVoeMHV:XU+pJH1Maj6ymdXUpVoeM1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d2b28b06e70f31738ae1ed17a1563599_JaffaCakes118

Files

d2b28b06e70f31738ae1ed17a1563599_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5b8eddb1530d975f2d06607ae6e00f2b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetFilePointer
CreateFileA
GetModuleFileNameA
ReleaseMutex
CreateMutexA
GetCommandLineA
GetCurrentThreadId
GetFileTime
lstrcatA
ReadFile
FreeResource
lstrlenA
WriteFile
SetFileTime
LocalFileTimeToFileTime
GetTempPathA
LocalReAlloc
LocalFree
LocalAlloc
GetVersion
LoadLibraryA
GetProcAddress
FreeLibrary
CreateRemoteThread
WaitForSingleObject
OpenProcess
CreateToolhelp32Snapshot
Process32First
Process32Next
GetCurrentProcess
CloseHandle
CopyFileA
Sleep
DeleteFileA
SetLastError
lstrcmpA
GetLastError
GetTickCount
OutputDebugStringA
GetSystemDirectoryA
WritePrivateProfileStringA
GetFileAttributesA

user32

PostThreadMessageA
GetMessageA
wsprintfA
MessageBoxA
GetInputState

advapi32

AdjustTokenPrivileges
RegQueryValueExA
RegSetValueExA
RegCloseKey
RegOpenKeyExA
RegCreateKeyExA
OpenServiceA
CloseServiceHandle
StartServiceA
OpenSCManagerA
CreateServiceA
OpenProcessToken
EnumServicesStatusA
QueryServiceConfigA
UnlockServiceDatabase
ChangeServiceConfigA
LockServiceDatabase
LookupPrivilegeValueA

msvcrt

_strlwr
??1type_info@@UAE@XZ
__dllonexit
_onexit
exit
??3@YAXPAX@Z
__CxxFrameHandler
??2@YAPAXI@Z
sprintf
rand
strchr
realloc
malloc
strncmp
strtoul
isdigit
rename
strstr
fclose
fread
fseek
fopen

Sections

.data
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

5b8eddb1530d975f2d06607ae6e00f2b

Headers

File Characteristics

Imports

kernel32

user32

advapi32

msvcrt

Sections

.data Size: 14KB - Virtual size: 13KB

.CRT Size: 512B - Virtual size: 4B

.data
Size: 14KB - Virtual size: 13KB

.CRT
Size: 512B - Virtual size: 4B