10c8999d0a6ad09e23ed768ec74bb4d0_JaffaCakes118

General

Target

10c8999d0a6ad09e23ed768ec74bb4d0_JaffaCakes118
Size

638KB
MD5

10c8999d0a6ad09e23ed768ec74bb4d0
SHA1

f941200a05fc55a67a501d207450e40008f32fcc
SHA256

3a256b453f5097745c9aae1dcce00d6f638967d42d650553d0b4fbfa25e81322
SHA512

ff4a24e924981460403dd95f8c08a4675f336ae6ffc70261ba45a740ef157b7484e379352f2f97f767b6677cad0bca6a4445743c6cd5cc64c2cb99c94a9b9d5a
SSDEEP

3072:yWzsMRpACQ1uC2cc48ewjihurneZJ1/vpVayoxjo5BdHbaJKC04O4:yVTCQ1icXSjmun8J1/HpXBdbaJ/d

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
10c8999d0a6ad09e23ed768ec74bb4d0_JaffaCakes118

Files

10c8999d0a6ad09e23ed768ec74bb4d0_JaffaCakes118
.exe windows:0 windows x86 arch:x86

5b567f65baae4df6543dec93f0e58667

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteFileW
lstrcpyA
CloseHandle
ReleaseMutex
GetLastError
CreateMutexA
ExitProcess
CreateThread
GetModuleFileNameA
GetModuleHandleA
FreeResource
lstrlenA
SizeofResource
CreateFileW
FindResourceW
GetSystemDirectoryW
lstrcatW
GetTickCount
lstrlenW
SleepEx
VirtualAlloc
VirtualProtectEx
VirtualAllocEx
SetThreadContext
ResumeThread
TerminateProcess
LoadLibraryW
GetProcAddress
CreateProcessW
GetThreadContext
ReadProcessMemory

user32

wsprintfW
LoadIconW
LoadCursorW
RegisterClassExW
CreateWindowExW
UpdateWindow
GetMessageW
TranslateMessage
DispatchMessageW
DefWindowProcW
FindWindowW
SendMessageW

advapi32

RegSetValueExW
RegOpenKeyExW
RegDeleteValueW
RegQueryValueExW
RegCreateKeyExW
CreateServiceW
CloseServiceHandle
DeleteService
OpenServiceW
OpenSCManagerW
StartServiceW
ChangeServiceConfigW
RegCloseKey

msvcrt.dll�

ftell
fseek
fclose
fopen
strstr
strchr
_except_handler3
realloc
malloc
_strnset
fread
??2@YAPAXI@Z

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 114KB - Virtual size: 113KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 514KB - Virtual size: 516KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5b567f65baae4df6543dec93f0e58667

Headers

File Characteristics

Imports

kernel32

user32

advapi32

msvcrt.dll�

Sections

.text Size: 6KB - Virtual size: 6KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 114KB - Virtual size: 113KB

.rsrc Size: 514KB - Virtual size: 516KB

.text
Size: 6KB - Virtual size: 6KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 114KB - Virtual size: 113KB

.rsrc
Size: 514KB - Virtual size: 516KB