420042233b2542df6248fb7653a62d61_JaffaCakes118

General

Target

420042233b2542df6248fb7653a62d61_JaffaCakes118
Size

48KB
MD5

420042233b2542df6248fb7653a62d61
SHA1

af0e1f70196c6de40d68f6ac1f765495579cfe3b
SHA256

e0a6a35d510fc0f0da2206a800a9b6a41e92d92b6b10d169d4533d03cf94e625
SHA512

a731830ea79343ecfe1ce9b57abdbd0f6393832ced184f95c0788fd6f05ad902ee61b9c412abd610d4b269d7e78f14154376dbac3b4e88ad0b4416c9ce9dbaee
SSDEEP

768:OxCvNyaKXZ6rGdUPexwDp7R3C8U04Oq3X/gt9:46Fi6rgEexwDBcr09qIt9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
420042233b2542df6248fb7653a62d61_JaffaCakes118

Files

420042233b2542df6248fb7653a62d61_JaffaCakes118
.exe windows:4 windows x86 arch:x86

035603e383ae3b8cb3bb15cb1855d256

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

StartServiceCtrlDispatcherA
CloseServiceHandle
CreateServiceA
OpenSCManagerA
DeleteService
ControlService
OpenServiceA
SetServiceStatus
RegisterServiceCtrlHandlerA

kernel32

GetCommandLineA
GlobalAlloc
GlobalFree
Sleep
OpenMutexA
CloseHandle
GetLastError
GetModuleFileNameA
CopyFileA
CreateProcessA
RtlUnwind
RaiseException
GetModuleHandleA
GetStartupInfoA
GetVersionExA
HeapFree
SetUnhandledExceptionFilter
WideCharToMultiByte
ExitProcess
GetProcAddress
TerminateProcess
GetCurrentProcess
WriteFile
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapAlloc
VirtualAlloc
HeapReAlloc
IsBadWritePtr
SetFilePointer
IsBadReadPtr
IsBadCodePtr
CompareStringA
MultiByteToWideChar
GetCPInfo
CompareStringW
GetACP
GetOEMCP
SetEnvironmentVariableA
LoadLibraryA
InterlockedExchange
VirtualQuery
SetStdHandle
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetLocaleInfoA
VirtualProtect
GetSystemInfo
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
HeapSize
FlushFileBuffers

Sections

.text
Size: 32KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

035603e383ae3b8cb3bb15cb1855d256

Headers

File Characteristics

Imports

advapi32

kernel32

Sections

.text Size: 32KB - Virtual size: 30KB

.rdata Size: 8KB - Virtual size: 6KB

.data Size: 4KB - Virtual size: 7KB

.text
Size: 32KB - Virtual size: 30KB

.rdata
Size: 8KB - Virtual size: 6KB

.data
Size: 4KB - Virtual size: 7KB