d4234a9476aaf05758edd6c0fddd963b_JaffaCakes118

General

Target

d4234a9476aaf05758edd6c0fddd963b_JaffaCakes118
Size

108KB
MD5

d4234a9476aaf05758edd6c0fddd963b
SHA1

e3a8d750fdd0e4ca35990942f73b715602a744d2
SHA256

f0daa65b176c60444b363f983933c5029665293f9a8bea707c4c8eee28c3427c
SHA512

366f8f8bf4220316e792582e61a38f975f310c82a0eb589760498d6ffc07457357ae5167876209b496637ebbfe7a5e106d152df837342cfb49575c2c805a1e30
SSDEEP

1536:X3n59TIEURh4PU/oj5UxcoDTOc01nFqilT6BQQZjuWKEoq9YsSZxHpWp9i:ndURh4PUAdUxcoDynnH4uJEoq9YbpS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d4234a9476aaf05758edd6c0fddd963b_JaffaCakes118

Files

d4234a9476aaf05758edd6c0fddd963b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5ec3650e47b703135c289e60825baada

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentThreadId
GetPrivateProfileStringA
WritePrivateProfileStringA
GetModuleFileNameA
MultiByteToWideChar
WideCharToMultiByte
GetTickCount
Sleep
lstrcatA
FindResourceA
HeapFree
LoadResource
GetSystemDirectoryA
CreateFileA
SizeofResource
WriteFile
CloseHandle
FreeResource
SetLastError
lstrlenA
lstrcpyA
GetLastError
GetProcessHeap
HeapAlloc
GetModuleHandleA
GetProcAddress

user32

wsprintfA
GetMessageA
PostThreadMessageA
GetInputState

advapi32

GetAclInformation
OpenSCManagerA
OpenServiceA
CloseServiceHandle
StartServiceA
RegQueryValueExA
RegOpenKeyExA
RegDeleteValueA
RegDeleteKeyA
RegCreateKeyExA
RegSetValueExA
RegCloseKey
LookupAccountNameA
GetFileSecurityA
InitializeSecurityDescriptor
GetSecurityDescriptorDacl
GetLengthSid
InitializeAcl
GetAce
EqualSid
AddAce
AddAccessAllowedAce
SetSecurityDescriptorDacl
GetSecurityDescriptorControl
SetFileSecurityA
DeleteService
ControlService
GetUserNameA
QueryServiceStatus
CreateServiceA

shlwapi

SHDeleteKeyA

netapi32

NetUserGetLocalGroups
NetApiBufferFree

msvcrt

memcpy
??1type_info@@UAE@XZ
??3@YAXPAX@Z
srand
rand
fopen
_CxxThrowException
__CxxFrameHandler
memset
_except_handler3
strlen
_stricmp
strchr

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 100KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5ec3650e47b703135c289e60825baada

Headers

File Characteristics

Imports

kernel32

user32

advapi32

shlwapi

netapi32

msvcrt

Sections

.text Size: 7KB - Virtual size: 6KB

.rsrc Size: 100KB - Virtual size: 100KB

.text
Size: 7KB - Virtual size: 6KB

.rsrc
Size: 100KB - Virtual size: 100KB