54e7ad9a7e6135e4b67c9da7ec641b32_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

54e7ad9a7e6135e4b67c9da7ec641b32_JaffaCakes118
Size

108KB
MD5

54e7ad9a7e6135e4b67c9da7ec641b32
SHA1

b11a2a429ecb744a87d1092e4aac907843679458
SHA256

d9e8eeaf45f869d9162470e6e6c239aab28d654f7cb9e4aa1fd9085bd6328565
SHA512

563172da07a9e50a8a95de54c71e1b2e7ba1203d71d5eb375f7922c4f05cd609f66dbae4f72ec99f355e2545cedb17275a1261b068fb45072090e615956ed9d2
SSDEEP

1536:IW0/UsbWvdGW+xwpCohahc6UxEoCGz+iOznna6nodQsEoFpYv:IjxbWvdGPndu3GoNz238QsEojYv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
54e7ad9a7e6135e4b67c9da7ec641b32_JaffaCakes118

Files

54e7ad9a7e6135e4b67c9da7ec641b32_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a1505194b2f07b43377e1584566bef4b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
ReadFile
DeviceIoControl
GetModuleHandleA
GetLastError
MultiByteToWideChar
WideCharToMultiByte
LocalFree
SetEndOfFile
SetStdHandle
IsBadCodePtr
GetModuleFileNameA
CreateDirectoryA
GetFileAttributesA
DeleteFileA
CreateProcessA
WaitForSingleObject
CloseHandle
CopyFileA
CreateFileA
CreateFileMappingA
GetCompressedFileSizeA
GetFileSize
SetFileAttributesA
LoadLibraryA
GetProcAddress
GetVersionExA
FreeLibrary
GetWindowsDirectoryA
lstrlenA
IsBadReadPtr
GetStringTypeW
GetStringTypeA
FlushFileBuffers
SetFilePointer
IsBadWritePtr
VirtualAlloc
RtlUnwind
RaiseException
GetCommandLineA
GetVersion
ExitProcess
HeapFree
HeapAlloc
HeapReAlloc
TerminateProcess
GetCurrentProcess
LCMapStringA
LCMapStringW
GetCPInfo
HeapSize
GetACP
GetOEMCP
SetUnhandledExceptionFilter
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
WriteFile

advapi32

StartServiceCtrlDispatcherA
SetServiceStatus
RegisterServiceCtrlHandlerA
ControlService
DeleteService
StartServiceA
QueryServiceStatus
CreateServiceA
ChangeServiceConfig2A
RegCreateKeyA
RegSetValueExA
OpenSCManagerA
OpenServiceA
CloseServiceHandle
DeregisterEventSource
RegOpenKeyExA
RegCloseKey
RegEnumValueA

ole32

CoUninitialize
CoGetClassObject
StringFromCLSID
CoInitialize

oleaut32

VariantClear

Sections

.text
Size: 80KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 936B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a1505194b2f07b43377e1584566bef4b

Headers

File Characteristics

Imports

kernel32

advapi32

ole32

oleaut32

Sections

.text Size: 80KB - Virtual size: 76KB

.rdata Size: 12KB - Virtual size: 9KB

.data Size: 8KB - Virtual size: 15KB

.rsrc Size: 4KB - Virtual size: 936B

.text
Size: 80KB - Virtual size: 76KB

.rdata
Size: 12KB - Virtual size: 9KB

.data
Size: 8KB - Virtual size: 15KB

.rsrc
Size: 4KB - Virtual size: 936B