3d43340e3afee79cf6b3be593f4857ea_JaffaCakes118

General

Target

3d43340e3afee79cf6b3be593f4857ea_JaffaCakes118
Size

48KB
MD5

3d43340e3afee79cf6b3be593f4857ea
SHA1

835ae523c7db098fa8cf6412fa32af6b036f5fc7
SHA256

e68a756e42818a7cb79bd25a1cffd97486b1724289f2d62e951d694b76d229c7
SHA512

bdc35c0b591ba0e20fc8d8d9aa395c165fb4384ff5f60b7e12532453d8f7bded4c5697ade860daf65bddea5d429a658eb85305ffce40ba11180ca2a11a555d96
SSDEEP

768:5Yf2ZkmaAyapPR67hooVzUneiwbxbh3Cs8s4OVjlz/gtU:5bmST6Noiceiwb5MjsdhitU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3d43340e3afee79cf6b3be593f4857ea_JaffaCakes118

Files

3d43340e3afee79cf6b3be593f4857ea_JaffaCakes118
.exe windows:4 windows x86 arch:x86

04cc445b3d18d02ac85872750b916bba

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

StartServiceCtrlDispatcherA
CloseServiceHandle
CreateServiceA
OpenSCManagerA
DeleteService
ControlService
OpenServiceA
SetServiceStatus
RegisterServiceCtrlHandlerA

kernel32

GetCommandLineA
Sleep
OpenMutexA
CloseHandle
GetLastError
GetModuleFileNameA
CopyFileA
CreateProcessA
RtlUnwind
RaiseException
GetModuleHandleA
GetStartupInfoA
GetVersionExA
HeapFree
SetUnhandledExceptionFilter
WideCharToMultiByte
ExitProcess
GetProcAddress
TerminateProcess
GetCurrentProcess
WriteFile
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapAlloc
VirtualAlloc
HeapReAlloc
IsBadWritePtr
SetFilePointer
IsBadReadPtr
IsBadCodePtr
CompareStringA
MultiByteToWideChar
GetCPInfo
CompareStringW
GetACP
GetOEMCP
SetEnvironmentVariableA
LoadLibraryA
InterlockedExchange
VirtualQuery
SetStdHandle
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetLocaleInfoA
VirtualProtect
GetSystemInfo
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
HeapSize
FlushFileBuffers

Sections

.text
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

04cc445b3d18d02ac85872750b916bba

Headers

File Characteristics

Imports

advapi32

kernel32

Sections

.text Size: 32KB - Virtual size: 31KB

.rdata Size: 8KB - Virtual size: 5KB

.data Size: 4KB - Virtual size: 7KB

.text
Size: 32KB - Virtual size: 31KB

.rdata
Size: 8KB - Virtual size: 5KB

.data
Size: 4KB - Virtual size: 7KB