28c85ba712fdf724a0cbbc9274f22cbd_JaffaCakes118

General

Target

28c85ba712fdf724a0cbbc9274f22cbd_JaffaCakes118
Size

124KB
MD5

28c85ba712fdf724a0cbbc9274f22cbd
SHA1

8a82f14bc137a8de0a8976af480c4174cbb57122
SHA256

62408d357680adcb3edd2aaf8c9a56de2d8c53a35a5b210e65843c6a5e494e9d
SHA512

88498ea6e80da51a208d48b5d6a58a77449f7d7361dff41e291f72090889292c97e1338cd94049b65103bd4d57c531185c1fad949eb509f206963e1c259c94b7
SSDEEP

1536:TS7JDMb7x47LoZhIR0KEw/FcACb75HTvOBpS3obz+ct7lUro1uRf06:TSeb7MLoZmOQ/OACb74p1hyro1uRs6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
28c85ba712fdf724a0cbbc9274f22cbd_JaffaCakes118

Files

28c85ba712fdf724a0cbbc9274f22cbd_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6209ab9b99dd981204760d8b5c07321f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateDirectoryA
GetLastError
GetSystemDirectoryA
DeleteFileA
Sleep
ResumeThread
CreateProcessA
SetThreadPriority
FindResourceA
SetPriorityClass
GetCurrentProcess
lstrcatA
lstrcpyA
GetEnvironmentVariableA
GetShortPathNameA
GetModuleFileNameA
SizeofResource
LoadResource
GlobalAlloc
LockResource
CreateFileA
WriteFile
CloseHandle
GlobalFree
SetLastError
GetCurrentThread
lstrlenA
GetStringTypeW
FlushFileBuffers
GetStringTypeA
LCMapStringW
ExitProcess
TerminateProcess
RtlUnwind
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
SetFilePointer
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
VirtualAlloc
HeapReAlloc
GetProcAddress
LoadLibraryA
SetStdHandle
MultiByteToWideChar
LCMapStringA

advapi32

CreateServiceA
RegOpenKeyExA
RegCreateKeyA
RegSetValueExA
RegOpenKeyA
RegCloseKey
RegQueryValueExA
StartServiceA
CloseServiceHandle
OpenSCManagerA

shell32

SHFileOperationA

shlwapi

PathFileExistsA

Sections

.text
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 92KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6209ab9b99dd981204760d8b5c07321f

Headers

File Characteristics

Imports

kernel32

advapi32

shell32

shlwapi

Sections

.text Size: 20KB - Virtual size: 18KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 4KB - Virtual size: 8KB

.rsrc Size: 92KB - Virtual size: 88KB

.text
Size: 20KB - Virtual size: 18KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 4KB - Virtual size: 8KB

.rsrc
Size: 92KB - Virtual size: 88KB