ebf8ae370344e61dbad7a92cd4885bc0_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

ebf8ae370344e61dbad7a92cd4885bc0_JaffaCakes118
Size

76KB
MD5

ebf8ae370344e61dbad7a92cd4885bc0
SHA1

2330e7dc94f03114f8810edbe119661b672e7b56
SHA256

67f642938df1c03fd40ea26fb799a4e235330a211784feacd541a9c4deb3aa18
SHA512

2212dfda3cf06eab0d06c90fa40dd5e796a9a613c4d1f4175a5fdc744aab920e45d7b0221cc6cc66bd4d1e3236471dce4bc55dafce1fe58c924784eea38d291e
SSDEEP

1536:1GqSKLEuwDeZApFpz1WxbTrPhsLQtE3mY:sW3sLQtaz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ebf8ae370344e61dbad7a92cd4885bc0_JaffaCakes118

Files

ebf8ae370344e61dbad7a92cd4885bc0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6bc9c99fa2f435cd37e30d976cdead72

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

d:\hhh01\Release\hhh01.pdb

Imports

kernel32

GetModuleFileNameA
GetCurrentDirectoryA
FreeConsole
MultiByteToWideChar
GetCurrentProcess
DeleteFileA
GetDriveTypeA
GetLogicalDriveStringsA
SetFilePointer
CloseHandle
WriteFile
GetLastError
CreateFileA
LockResource
SizeofResource
LoadResource
FindResourceA
DeviceIoControl
GetFileAttributesA
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EnterCriticalSection
LeaveCriticalSection
GetProcAddress
GetModuleHandleA
ExitProcess
GetStdHandle
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
Sleep
GetCPInfo
GetACP
GetOEMCP
RtlUnwind
GetConsoleCP
GetConsoleMode
LoadLibraryA
InitializeCriticalSection
VirtualAlloc
HeapReAlloc
FlushFileBuffers
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
HeapSize

advapi32

DeleteService
ControlService
RegCloseKey
RegDeleteValueA
RegOpenKeyExA
CloseServiceHandle
StartServiceA
OpenServiceA
CreateServiceA
OpenSCManagerW
RegSetValueExA

Sections

.text
Size: 40KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6bc9c99fa2f435cd37e30d976cdead72

Headers

File Characteristics

PDB Paths

Imports

kernel32

advapi32

Sections

.text Size: 40KB - Virtual size: 38KB

.rdata Size: 12KB - Virtual size: 9KB

.data Size: 4KB - Virtual size: 10KB

.rsrc Size: 16KB - Virtual size: 15KB

.text
Size: 40KB - Virtual size: 38KB

.rdata
Size: 12KB - Virtual size: 9KB

.data
Size: 4KB - Virtual size: 10KB

.rsrc
Size: 16KB - Virtual size: 15KB