f9c60f7a0349f35be244641aa664b8bf_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

f9c60f7a0349f35be244641aa664b8bf_JaffaCakes118
Size

105KB
MD5

f9c60f7a0349f35be244641aa664b8bf
SHA1

6564d030e7c141da8b63384d138c11e1129ecd30
SHA256

92dbd1aa437aa4721b919c775230541e698c4e3c61251fba84fc50862e8bd2f2
SHA512

eaec655da1ee9acc9b9abcd3d11d0b2446a260280f4c55949a148bd61e333d4e297e17af4fa3548a109a0ead143dd86895730fa0788b08c4466df94aedca3f68
SSDEEP

3072:cdETdcpzwaytsW+TOoe+gpRW2qWzKVogd:WUqEBAkzq2q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f9c60f7a0349f35be244641aa664b8bf_JaffaCakes118

Files

f9c60f7a0349f35be244641aa664b8bf_JaffaCakes118
.exe windows:6 windows x86 arch:x86

fcab6ad32968803cc710906891796c9f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

ieetwcollector.pdb

Imports

advapi32

SetServiceStatus
RegisterServiceCtrlHandlerExW
OpenSCManagerW
OpenServiceW
QueryServiceStatus
StartServiceW
CloseServiceHandle
StartServiceCtrlDispatcherW
CreateServiceW
QueryServiceConfig2W
ChangeServiceConfig2W
DeleteService
ControlService
RegCreateKeyExW
RegSetValueExW
RegCloseKey
EventRegister
EventUnregister
EventWrite
StartTraceW
ControlTraceW
EnableTraceEx2
TraceSetInformation

kernel32

GetCurrentThreadId
UnregisterWaitEx
OpenProcess
GetLastError
RegisterWaitForSingleObject
CreateThread
GetFileAttributesW
DeleteFileW
WaitForSingleObject
CloseHandle
GetTempPathW
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
LoadLibraryExW
GetProcAddress
FreeLibrary
QueryPerformanceCounter
SetEvent
CreateEventW
GetModuleFileNameW
GetCurrentProcessId
GetComputerNameExW
QueryPerformanceFrequency
GetVersionExW
ExpandEnvironmentStringsW
CreateDirectoryW
RemoveDirectoryW
CreateFileA
WriteConsoleW
WriteConsoleA
GetConsoleOutputCP
SetFilePointer
SetStdHandle
GetConsoleMode
GetConsoleCP
FlushFileBuffers
VirtualQuery
VirtualProtect
GetSystemInfo
LCMapStringA
LCMapStringW
WideCharToMultiByte
GetVersionExA
RaiseException
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
HeapAlloc
HeapFree
SetLastError
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
ExitProcess
GetStdHandle
WriteFile
GetModuleFileNameA
HeapCreate
VirtualFree
GetFileType
SetHandleCount
GetStartupInfoA
GetSystemTimeAsFileTime
GetTickCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetCommandLineW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
OutputDebugStringA
HeapReAlloc
HeapSize
VirtualAlloc
Sleep
InitializeCriticalSectionAndSpinCount
LoadLibraryExA
RtlUnwind
GetLocaleInfoA
GetStringTypeW
MultiByteToWideChar
GetStringTypeA

ole32

CoRevertToSelf
CoImpersonateClient
CoRevokeClassObject
CoResumeClassObjects
CoRegisterClassObject
CoInitializeSecurity
StringFromGUID2
CoCreateGuid
CoUninitialize
CoCreateInstance
CoInitializeEx
CoSuspendClassObjects

oleaut32

SysFreeString
SysStringLen
SysAllocStringLen
SysAllocString

shlwapi

SHDeleteKeyW

Sections

.text
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fcab6ad32968803cc710906891796c9f

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

advapi32

kernel32

ole32

oleaut32

shlwapi

Sections

.text Size: 80KB - Virtual size: 80KB

.data Size: 4KB - Virtual size: 11KB

.idata Size: 3KB - Virtual size: 3KB

.rsrc Size: 2KB - Virtual size: 2KB

.reloc Size: 13KB - Virtual size: 13KB

.text
Size: 80KB - Virtual size: 80KB

.data
Size: 4KB - Virtual size: 11KB

.idata
Size: 3KB - Virtual size: 3KB

.rsrc
Size: 2KB - Virtual size: 2KB

.reloc
Size: 13KB - Virtual size: 13KB