fff1d192ccc7b905fe4539fd7aa11f35_JaffaCakes118

General

Target

fff1d192ccc7b905fe4539fd7aa11f35_JaffaCakes118
Size

66KB
MD5

fff1d192ccc7b905fe4539fd7aa11f35
SHA1

651833fab8343c381c521eb30586cd7996f8b220
SHA256

c2f4abdea1641c1164c36c54284821490f8ebf8ab21fd6788a60eee2ffcb6663
SHA512

b7ce65cc2dab551b085317dddcc805264d1c0afcb58a93ef4e2a8d2ff3b6f0f9d15ca3d22caa517673d39fabe06f043d4d52b82a63430fb418d251a328f55f08
SSDEEP

1536:TxW4xSVlGCzWyMhp/brd/I/sQ+LdL1tpCJqzn611:bSjGKKpvZI/sQw7pQqO1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fff1d192ccc7b905fe4539fd7aa11f35_JaffaCakes118

Files

fff1d192ccc7b905fe4539fd7aa11f35_JaffaCakes118
.exe windows:4 windows x86 arch:x86

517889a0af59dda348e28f758325ff6c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ulib

??OTIMEINFO@@QBEEV0@@Z
??4BDSTRING@@QAEAAV0@ABV0@@Z
?Strlwr@WSTRING@@QAEPAV1@XZ
?WriteByte@STREAM@@QAEEE@Z
?Initialize@WSTRING@@QAEEPBV1@KK@Z
?IsYesResponse@MESSAGE@@UAEEE@Z
??0DSTRING@@QAE@XZ
??0BDSTRING@@QAE@ABV0@@Z
?Initialize@BSTRING@@QAEEPBDK@Z
??0PROGRAM@@IAE@XZ
?IsDrive@PATH@@QBEEXZ
?DeleteChAt@WSTRING@@QAEXKK@Z
??9WSTRING@@QBEEABV0@@Z
?ComputeCountSet@BITVECTOR@@ABEKXZ
?QuerySTR@WSTRING@@QBEPADKKPADKE@Z

advapi32

InitializeAcl
MapGenericMask
StartServiceW
QueryServiceStatus
RegOpenKeyW
LookupPrivilegeNameW
AllocateAndInitializeSid
GetSidSubAuthorityCount
OpenSCManagerW
OpenServiceW

msvcrt

_onexit
exit
strtol
abs
fopen
fclose
wcsncmp
_itoa
_getcwd
_except_handler3

kernel32

FindVolumeMountPointClose
OpenWaitableTimerW
SetConsoleOutputCP
CreateProcessA
HeapAlloc
SetEnvironmentVariableA
VerSetConditionMask
ReleaseSemaphore
GetConsoleKeyboardLayoutNameA

Sections

.text
Size: 59KB - Virtual size: 59KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 142KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 968B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

517889a0af59dda348e28f758325ff6c

Headers

File Characteristics

Imports

ulib

advapi32

msvcrt

kernel32

Sections

.text Size: 59KB - Virtual size: 59KB

.rdata Size: 3KB - Virtual size: 2KB

.data Size: 2KB - Virtual size: 142KB

.rsrc Size: 1024B - Virtual size: 968B

.text
Size: 59KB - Virtual size: 59KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 2KB - Virtual size: 142KB

.rsrc
Size: 1024B - Virtual size: 968B