2c9a89e23d9d2c08e1d2cc58efffa49a_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

2c9a89e23d9d2c08e1d2cc58efffa49a_JaffaCakes118
Size

148KB
MD5

2c9a89e23d9d2c08e1d2cc58efffa49a
SHA1

9e2547b7a774b77d69bbe90889e8bd5e0ad9cfab
SHA256

ba10aa11b42f499ebdf1ec957fd2c00948a890d866284e27c67ece7136b8aded
SHA512

8c815c0231872cbde6f35be0c2099f03d5ef609b9d74a8e0f2203508308a01517769c1b7f37cc225065cd2c7328a25d761dc5a4d2588aaf090c46d165d3aace5
SSDEEP

1536:7twMsoQuMJhUdhl7kabB6MmnuBEANsqQWa5w2R/8wUU5g71Rc9G+8ydwofs9rR9B:uoc8dLkablAuBGwa5ZNOHTTRyY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2c9a89e23d9d2c08e1d2cc58efffa49a_JaffaCakes118

Files

2c9a89e23d9d2c08e1d2cc58efffa49a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ec6f51f61c7ea8d4579815f1496c50a2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetFileTime
GetFileAttributesExA
CreateFileA
GetLastError
Sleep
OpenProcess
DuplicateHandle
GetCurrentProcess
WriteFile
GetStartupInfoA
GetModuleHandleA
GetModuleFileNameA
GetSystemDirectoryA
WinExec
LoadLibraryA
GetProcAddress
CloseHandle
GetVersionExA

user32

ShowWindow
RegisterClassExA
GetMessageA
PostQuitMessage
CreateWindowExA
DefWindowProcA
DispatchMessageA
GetDesktopWindow
TranslateMessage

advapi32

ConvertSidToStringSidA
RegCloseKey
OpenServiceA
DeleteService
CloseServiceHandle
RegOpenKeyExA
OpenSCManagerA
LookupAccountNameA
GetUserNameA
StartServiceA
CreateServiceA
RegQueryValueExA

shlwapi

SHDeleteKeyA
SHSetValueA

msvcrt

fflush
_stricmp
_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
sprintf
_access
rand
srand
time
??3@YAXPAX@Z
??2@YAPAXI@Z
fclose
fwrite
fopen
_except_handler3
_exit

dbghelp

ImageNtHeader

Sections

.text
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 104KB - Virtual size: 102KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

mdata
Size: 4KB - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

edata
Size: 4KB - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

cdata
Size: 4KB - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

idata
Size: 4KB - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ec6f51f61c7ea8d4579815f1496c50a2

Headers

File Characteristics

Imports

kernel32

user32

advapi32

shlwapi

msvcrt

dbghelp

Sections

.text Size: 16KB - Virtual size: 13KB

.rdata Size: 4KB - Virtual size: 1KB

.data Size: 104KB - Virtual size: 102KB

mdata Size: 4KB - Virtual size: 4B

edata Size: 4KB - Virtual size: 4B

cdata Size: 4KB - Virtual size: 4B

idata Size: 4KB - Virtual size: 4B

.rsrc Size: 4KB - Virtual size: 1KB

.text
Size: 16KB - Virtual size: 13KB

.rdata
Size: 4KB - Virtual size: 1KB

.data
Size: 104KB - Virtual size: 102KB

mdata
Size: 4KB - Virtual size: 4B

edata
Size: 4KB - Virtual size: 4B

cdata
Size: 4KB - Virtual size: 4B

idata
Size: 4KB - Virtual size: 4B

.rsrc
Size: 4KB - Virtual size: 1KB