2fc49f9b2d586521af20746a33ee74a5_JaffaCakes118

General

Target

2fc49f9b2d586521af20746a33ee74a5_JaffaCakes118
Size

52KB
MD5

2fc49f9b2d586521af20746a33ee74a5
SHA1

f4e414bb26208e220390a73e43cf753f8244268b
SHA256

d6db3392898b11104c5d33e3a5514c0587788c191cf54804778ccffe42eb6b21
SHA512

7f65f0a0f402f2c26025c59196e6d9ab584e956319f8d833b259830fea87c1bcf1fd015adb616c864df028146238debe85e5d78000de88f9981cb8e63a35e1ac
SSDEEP

768:pyPXIo0Ibd/cMhbTzcSNxPx6vA+Fekoj:pIb1N6V7oj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2fc49f9b2d586521af20746a33ee74a5_JaffaCakes118

Files

2fc49f9b2d586521af20746a33ee74a5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f90989b22ddfd0475f7ad68e7a64403a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetFileAttributesA
DeleteFileA
GetSystemDirectoryA
WinExec
Sleep
GetLastError
HeapReAlloc
RtlUnwind
GetFileAttributesA
GetCommandLineA
GetVersion
ExitProcess
HeapFree
TerminateProcess
GetCurrentProcess
GetModuleFileNameA
HeapAlloc
HeapSize
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleHandleA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
WriteFile
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadWritePtr
IsBadCodePtr
VirtualAlloc
MultiByteToWideChar
LCMapStringA
LCMapStringW
SetFilePointer
GetCPInfo
GetACP
GetOEMCP
GetProcAddress
LoadLibraryA
FlushFileBuffers
GetStringTypeA
GetStringTypeW
SetStdHandle
CloseHandle

advapi32

RegSetValueExA
RegCreateKeyA
RegEnumKeyExA
RegOpenKeyExA
QueryServiceStatus
RegOpenKeyA
RegDeleteKeyA
SetServiceStatus
DeregisterEventSource
CloseServiceHandle
OpenServiceA
OpenSCManagerA
RegCloseKey
RegisterServiceCtrlHandlerA
CreateServiceA
DeleteService
ControlService
ReportEventA
RegisterEventSourceA
StartServiceCtrlDispatcherA

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 456B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f90989b22ddfd0475f7ad68e7a64403a

Headers

File Characteristics

Imports

kernel32

advapi32

Sections

.text Size: 28KB - Virtual size: 27KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 12KB - Virtual size: 16KB

.rsrc Size: 4KB - Virtual size: 456B

.text
Size: 28KB - Virtual size: 27KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 12KB - Virtual size: 16KB

.rsrc
Size: 4KB - Virtual size: 456B