eb6cd92ec3fe71fade7ecd952d3c309e_JaffaCakes118

General

Target

eb6cd92ec3fe71fade7ecd952d3c309e_JaffaCakes118
Size

104KB
MD5

eb6cd92ec3fe71fade7ecd952d3c309e
SHA1

9ed5c0d883580af19e9999ee223d7ac5a17f205d
SHA256

462f2a24b52d13153be5b071dc456c3d43e038f9f704ce5669dbe6139ee16c70
SHA512

c09f70d11f179773192a2857d41738886d2fc0e30a674e170715f0e33019db01f60e7ad1123aad1f888dcb10cbbe4661db9a780c2aaba0ba1698d7a0ab24a8b9
SSDEEP

1536:vkUeMNsMgCk3HViKcR9ioP7cA8XoXT820WTe7Z4o0W:pehH1iRR9ioP58k0X7Z4o0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eb6cd92ec3fe71fade7ecd952d3c309e_JaffaCakes118

Files

eb6cd92ec3fe71fade7ecd952d3c309e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

758a76aebdcb98f22fb4872542b2fc72

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetVersion
OpenProcess
CopyFileA
GetModuleFileNameA
DeleteFileA
GetSystemDirectoryA
LoadLibraryA
OutputDebugStringA
WriteProcessMemory
VirtualAllocEx
Sleep
GetProcAddress
CreateRemoteThread
WaitForSingleObject
CreateToolhelp32Snapshot
Process32First
Process32Next
GetCurrentProcess
GetModuleHandleA
FindResourceA
LoadResource
LockResource
SizeofResource
CreateFileA
WriteFile
CloseHandle
CreateThread
MultiByteToWideChar
ExitProcess
TerminateProcess
GetStartupInfoA
GetCommandLineA
RtlUnwind
RaiseException
HeapFree
HeapReAlloc
HeapAlloc
HeapSize
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
GetLastError
SetFilePointer
FlushFileBuffers
SetUnhandledExceptionFilter
VirtualAlloc
IsBadWritePtr
GetCPInfo
GetACP
GetOEMCP
IsBadReadPtr
IsBadCodePtr
ReadFile
SetStdHandle
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW

advapi32

RegisterServiceCtrlHandlerA
SetServiceStatus
StartServiceCtrlDispatcherA
OpenSCManagerA
OpenServiceA
QueryServiceStatus
ControlService
StartServiceA
CloseServiceHandle
RegCreateKeyExA
RegSetValueExA
RegCloseKey
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges

Sections

.text
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 52KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

758a76aebdcb98f22fb4872542b2fc72

Headers

File Characteristics

Imports

kernel32

advapi32

Sections

.text Size: 36KB - Virtual size: 35KB

.rdata Size: 8KB - Virtual size: 7KB

.data Size: 4KB - Virtual size: 10KB

.rsrc Size: 52KB - Virtual size: 48KB

.text
Size: 36KB - Virtual size: 35KB

.rdata
Size: 8KB - Virtual size: 7KB

.data
Size: 4KB - Virtual size: 10KB

.rsrc
Size: 52KB - Virtual size: 48KB