d6aa163c0f09895795012c2cf684bcc9_JaffaCakes118

General

Target

d6aa163c0f09895795012c2cf684bcc9_JaffaCakes118
Size

40KB
MD5

d6aa163c0f09895795012c2cf684bcc9
SHA1

0419a366c56f9811f6a26b3bf3a0962be662b43f
SHA256

9a23368c32cdf3d682dac6d33b1b7e679e759b80b56d6fab1e6059436474c55c
SHA512

3878601a2d2d4b502603b96bfaef3ad621713cba03638256781d3af28bde4b9ef8310d40fa305ea158c4f6ecbc03c10ac2446414398bb17aa23124f4f07619da
SSDEEP

768:XdLdP6vmXFmTuiNfsWGx/dIPtkTxtlGl21V:XdLpFmThOx/G8Wl21

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d6aa163c0f09895795012c2cf684bcc9_JaffaCakes118

Files

d6aa163c0f09895795012c2cf684bcc9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

202460c62fc85fb18433b1e09d9b5d5b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

InitializeCriticalSection
GetModuleFileNameA
DeleteCriticalSection
LoadLibraryA
FreeLibrary
GetLastError
EnterCriticalSection
LeaveCriticalSection
ResumeThread
CreateThread
TlsSetValue
TlsGetValue
ExitThread
CloseHandle
GetCommandLineA
GetVersion
ExitProcess
HeapFree
GetCurrentThreadId
TlsAlloc
SetLastError
HeapAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
RtlUnwind
InterlockedDecrement
InterlockedIncrement
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleHandleA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
WriteFile
SetFilePointer
VirtualAlloc
HeapReAlloc
GetCPInfo
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetACP
GetOEMCP
GetProcAddress
FlushFileBuffers
SetStdHandle
GetStringTypeA
GetStringTypeW

advapi32

CloseServiceHandle
StartServiceCtrlDispatcherA
CreateServiceA
ChangeServiceConfig2A
DeleteService
RegisterServiceCtrlHandlerA
SetServiceStatus
StartServiceA
OpenSCManagerA
ControlService
OpenServiceA

Sections

.text
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

202460c62fc85fb18433b1e09d9b5d5b

Headers

File Characteristics

Imports

kernel32

advapi32

Sections

.text Size: 23KB - Virtual size: 22KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 12KB - Virtual size: 17KB

.text
Size: 23KB - Virtual size: 22KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 12KB - Virtual size: 17KB