fc3853c2383e2fbb2af381fd1277504d_JaffaCakes118

General

Target

fc3853c2383e2fbb2af381fd1277504d_JaffaCakes118
Size

172KB
MD5

fc3853c2383e2fbb2af381fd1277504d
SHA1

18f33fb37060dff43c9c93e7a74934a22872b8be
SHA256

e9e0176e1d2285e679710240cd84216a04633075f3314abaec36a618119482f1
SHA512

5e94b79449db6682aa94e878f2b022d97424ffc595c69c849eb968946727767e424f55e759f68f3b6b63b4e485730eaf7e85aec62cf3fdeb60e08760fffa8656
SSDEEP

3072:vcel/XI6kjP9X1oJcskw823NWuuCORi8EURD126Qm7SrZG3cae4y+wkoHu:keNxmoJcsp/rNkRPRA6QmO1GMKx5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fc3853c2383e2fbb2af381fd1277504d_JaffaCakes118

Files

fc3853c2383e2fbb2af381fd1277504d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

251762fb31e7649a74285ff510ba4dc2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LocalFileTimeToFileTime
SystemTimeToFileTime
CreateFileA
lstrcpyA
lstrlenA
GetProcAddress
CreateMutexA
LoadLibraryA
GetSystemDirectoryA
SetLastError
GetModuleFileNameA
GetModuleHandleA
GetStartupInfoA
GetLastError
ReleaseMutex
CloseHandle
SetUnhandledExceptionFilter
Sleep
DeleteFileA
GetWindowsDirectoryA
GetFileAttributesA
WritePrivateProfileStringA

user32

wsprintfA

advapi32

RegOpenKeyExA
RegQueryValueExA
RegCloseKey
OpenSCManagerA
CloseServiceHandle
RegSetValueExA
RegCreateKeyA
OpenServiceA

msvcrt

??3@YAXPAX@Z
memcpy
fwrite
strlen
sprintf
fopen
strncat
strncpy
??2@YAPAXI@Z
strchr
memset
strcmp
strcat
__CxxFrameHandler
_CxxThrowException
fread
fseek
??1type_info@@UAE@XZ
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
fclose

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 165KB - Virtual size: 164KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

251762fb31e7649a74285ff510ba4dc2

Headers

File Characteristics

Imports

kernel32

user32

advapi32

msvcrt

Sections

.text Size: 4KB - Virtual size: 3KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 165KB - Virtual size: 164KB

.rsrc Size: 512B - Virtual size: 16B

.text
Size: 4KB - Virtual size: 3KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 165KB - Virtual size: 164KB

.rsrc
Size: 512B - Virtual size: 16B