f541a05787762925b82551299541261b_JaffaCakes118

General

Target

f541a05787762925b82551299541261b_JaffaCakes118
Size

52KB
MD5

f541a05787762925b82551299541261b
SHA1

a3722c877581190aa4df85c3a51a36fa83f3c413
SHA256

2e2b0c5f7b6f16d18a1924559091cf9c96d5c382d0f4c5b6d8752f5f518c7a4c
SHA512

ed76f9742ba415451e5dca7386597f2008252981ba38b31d13790eb9906336f2cc4e980cd22c4a388707ba0a85300d5593a70b2352ce55c5bc0e94c08ca2395a
SSDEEP

768:q6lYsbzXjCyO2vd8lDsvfZDsjApDLSS/mkDo+tn:qKYsHjk2vd8lwfZMA5uOtn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f541a05787762925b82551299541261b_JaffaCakes118

Files

f541a05787762925b82551299541261b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

de3946df0f283bcf7a201dbd8bbf7eb7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

StartServiceCtrlDispatcherA
OpenSCManagerA
CloseServiceHandle
CreateServiceA
DeleteService
ControlService
OpenServiceA
SetServiceStatus
RegisterServiceCtrlHandlerA

ws2_32

WSAGetLastError

kernel32

GetSystemInfo
VirtualProtect
Sleep
GetLastError
GetCommandLineA
OpenMutexA
CreateMutexA
CloseHandle
GetModuleFileNameA
CopyFileA
CreateProcessA
GetEnvironmentVariableA
ExitProcess
GetProcAddress
GetModuleHandleA
TerminateProcess
GetCurrentProcess
RtlUnwind
RaiseException
GetStartupInfoA
GetVersionExA
HeapFree
SetUnhandledExceptionFilter
WriteFile
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapReAlloc
HeapAlloc
HeapSize
IsBadReadPtr
IsBadWritePtr
IsBadCodePtr
VirtualAlloc
SetFilePointer
LoadLibraryA
GetACP
GetOEMCP
GetCPInfo
InterlockedExchange
VirtualQuery
SetStdHandle
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
FlushFileBuffers
GetLocaleInfoA

Sections

.text
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

de3946df0f283bcf7a201dbd8bbf7eb7

Headers

File Characteristics

Imports

advapi32

ws2_32

kernel32

Sections

.text Size: 36KB - Virtual size: 35KB

.rdata Size: 8KB - Virtual size: 6KB

.data Size: 4KB - Virtual size: 9KB

.text
Size: 36KB - Virtual size: 35KB

.rdata
Size: 8KB - Virtual size: 6KB

.data
Size: 4KB - Virtual size: 9KB