17896c8daf7f8eabc139ba163488f9ea_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

17896c8daf7f8eabc139ba163488f9ea_JaffaCakes118
Size

162KB
MD5

17896c8daf7f8eabc139ba163488f9ea
SHA1

3fa79c6b15191bdbf125cd86f20dfce0195db244
SHA256

f39183fad6c751a0c427fb6a4485a0c718bcb915b4bc326e9c7c36aaa17644e5
SHA512

492dc28db54597e7317490329d3066fd13fb4e3105432b73dc2632e8ba29883d8f445bb17bd92e8bd7717244e08ce896b350f3690ab967f32bd662afff386294
SSDEEP

3072:qC4PBXPYztXYgISCBd08VlHKT5RmcKh68KmJ86UGEloI:f4ZXAztX4Bd08VkT/ECPlo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
17896c8daf7f8eabc139ba163488f9ea_JaffaCakes118

Files

17896c8daf7f8eabc139ba163488f9ea_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4973b359b75520a9beb0c457c52102ec

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateDirectoryA
CreateEventA
DeleteCriticalSection
DisableThreadLibraryCalls
DuplicateHandle
ExitThread
FindFirstFileA
GetConsoleOutputCP
GetCurrentDirectoryA
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetDriveTypeA
GetFileAttributesA
GetFileSize
GetFileType
GetLocalTime
GetShortPathNameA
GetThreadLocale
HeapAlloc
HeapFree
InterlockedIncrement
LCMapStringA
LoadLibraryA
LoadResource
MoveFileExA
ReadFile
ResetEvent
SetCurrentDirectoryA
SetEnvironmentVariableA
SetFileAttributesA
SetPriorityClass
SetStdHandle
WriteConsoleA

user32

CharLowerA
CharNextA
CheckRadioButton
CreateDialogParamA
DestroyMenu
DialogBoxParamA
DispatchMessageA
DrawFocusRect
DrawIcon
DrawTextA
EnableMenuItem
ExitWindowsEx
GetClassNameA
GetDC
GetDlgItemTextA
GetMenuItemCount
GetMessageA
GetProcessWindowStation
GetWindowDC
GetWindowLongA
GetWindowRect
GetWindowThreadProcessId
IsChild
IsWindow
MessageBeep
MessageBoxA
MsgWaitForMultipleObjects
PostMessageA
ScreenToClient
SetCapture
SetDlgItemInt
SetWindowRgn
SystemParametersInfoA
TrackPopupMenu

advapi32

AdjustTokenPrivileges
AllocateAndInitializeSid
ChangeServiceConfig2A
ChangeServiceConfigA
CloseServiceHandle
ControlService
CreateServiceA
DeleteService
GetSecurityDescriptorControl
GetUserNameA
InitializeSecurityDescriptor
LockServiceDatabase
OpenSCManagerA
QueryServiceStatus
RegCreateKeyExA
RegDeleteKeyA
RegDeleteValueA
RegEnumKeyExA
RegFlushKey
RegOpenKeyA
RegOpenKeyExA
RegQueryInfoKeyA
RegQueryValueA
RegSetValueExA
RegisterServiceCtrlHandlerA
SetSecurityDescriptorDacl
StartServiceA
StartServiceCtrlDispatcherA

Sections

.text
Size: 147KB - Virtual size: 147KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 97KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data1
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 912B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4973b359b75520a9beb0c457c52102ec

Headers

File Characteristics

Imports

kernel32

user32

advapi32

Sections

.text Size: 147KB - Virtual size: 147KB

.data Size: 2KB - Virtual size: 97KB

.bss Size: - Virtual size: 6KB

.data1 Size: 7KB - Virtual size: 7KB

.idata Size: 3KB - Virtual size: 2KB

.rsrc Size: 1024B - Virtual size: 912B

.text
Size: 147KB - Virtual size: 147KB

.data
Size: 2KB - Virtual size: 97KB

.bss
Size: - Virtual size: 6KB

.data1
Size: 7KB - Virtual size: 7KB

.idata
Size: 3KB - Virtual size: 2KB

.rsrc
Size: 1024B - Virtual size: 912B