11730e5b13bf44f761217c3085fc7db5_JaffaCakes118

General

Target

11730e5b13bf44f761217c3085fc7db5_JaffaCakes118
Size

84KB
MD5

11730e5b13bf44f761217c3085fc7db5
SHA1

26098e8c85b104a2d9baf3517be45632a36c6756
SHA256

b7cd0bbef1d8a7d981168c69c4c5e7a5f75dbde9b9acb69cea493721835c739b
SHA512

fba7c6a0c5bbcfe57c01ceb0f22852fd7e7ecd7b4449c553bd8d7ad6c7cd9aa1e551022f9c1115e7cd5392be7d2b310385325ee2d30605049c067571dd4326f3
SSDEEP

768:L2QOsPZeQqbr51qinKBqS3HvudRcgbTotlSG1WW3CYqxY91yPm1HqEmOuTTyNWM:L2gG/qRN3PudRfQll3N4YDHqLO0GWM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
11730e5b13bf44f761217c3085fc7db5_JaffaCakes118

Files

11730e5b13bf44f761217c3085fc7db5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f8f6c0d04d837d6b842ad30e78cbb026

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindFirstFileA
CloseHandle
ReadFile
GetFileSize
CreateFileA
WinExec
GetLocalTime
CopyFileA
lstrcpyA
lstrcmpA
GetModuleFileNameA
ResumeThread
CreateProcessA
SetThreadPriority
WriteFile
SetPriorityClass
GetCurrentProcess
lstrcatA
GetEnvironmentVariableA
GetShortPathNameA
CreateThread
GetTempPathA
lstrlenA
GetLastError
GetSystemDirectoryA
GetStringTypeW
GetStringTypeA
FindClose
Sleep
GetTickCount
FreeLibrary
HeapAlloc
HeapFree
IsBadReadPtr
LoadLibraryA
GetProcAddress
VirtualFree
VirtualProtect
VirtualAlloc
GetProcessHeap
GetCurrentThread
LCMapStringW
LCMapStringA
MultiByteToWideChar
SetStdHandle
GetOEMCP
HeapReAlloc
RtlUnwind
ExitProcess
TerminateProcess
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
GetVersionExA
HeapDestroy
HeapCreate
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
SetFilePointer
GetCPInfo
GetACP
FlushFileBuffers

user32

wsprintfA

advapi32

RegisterServiceCtrlHandlerA
OpenSCManagerA
CreateServiceA
OpenServiceA
StartServiceA
RegOpenKeyA
CloseServiceHandle
RegOpenKeyExA
StartServiceCtrlDispatcherA
SetServiceStatus
RegCreateKeyA
RegSetValueExA
RegCloseKey

ws2_32

WSAStartup
WSACleanup
gethostbyname
gethostname

Sections

.text
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 44KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f8f6c0d04d837d6b842ad30e78cbb026

Headers

File Characteristics

Imports

kernel32

user32

advapi32

ws2_32

Sections

.text Size: 28KB - Virtual size: 26KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 44KB - Virtual size: 49KB

.rsrc Size: 4KB - Virtual size: 1KB

.text
Size: 28KB - Virtual size: 26KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 44KB - Virtual size: 49KB

.rsrc
Size: 4KB - Virtual size: 1KB