f122344137804d634abf460ee070f4d4_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

f122344137804d634abf460ee070f4d4_JaffaCakes118
Size

81KB
MD5

f122344137804d634abf460ee070f4d4
SHA1

d087923e92881a4a9305ddbf5d2c03fe1c01378e
SHA256

27cc550940179fa98b3917c5a8c0e88bd4d793f2d7a0b140807a04b3f9c79211
SHA512

7fd09c8804a437ddb1a975484db4cb16e93d41538e3678fc137c519fbb1e2d886250f3c09ab4cdd176c161ef64c7a9afbd474a65d7f912660a485a2d855b346a
SSDEEP

1536:oFjeGC8Kn4PysckhJHKX9RfLTobAtZ6vvh32bk5UO47Us+wF/+bSC68NEHaNwh9M:oF/C8K4PysckhJHKX9RfLTobAtZ6nh3P

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f122344137804d634abf460ee070f4d4_JaffaCakes118

Files

f122344137804d634abf460ee070f4d4_JaffaCakes118
.exe windows:1 windows x86 arch:x86

c1775243125dda6ee0b501f5840b3b77

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

htons
ioctlsocket
inet_addr
inet_ntoa
listen
ntohs
recv
select
accept
send
sendto
setsockopt
socket
gethostbyaddr
gethostbyname
bind
closesocket
WSAGetLastError
WSAStartup
WSACleanup
__WSAFDIsSet
connect
getpeername
getsockname
WSASocketA
htonl

shell32

ShellExecuteA

kernel32

ExitProcess
FindClose
FindFirstFileA
FindNextFileA
FreeLibrary
GetCommandLineA
GetDateFormatA
GetFileAttributesA
GetFileSize
GetLastError
GetModuleFileNameA
GetModuleHandleA
CloseHandle
GetProcAddress
GetSystemDirectoryA
GetTickCount
GetTimeFormatA
GetVersionExA
GetWindowsDirectoryA
GlobalMemoryStatus
CopyFileA
LoadLibraryA
CreateDirectoryA
MoveFileA
OpenProcess
CreateFileA
ReadFile
RtlUnwind
SetFileAttributesA
SetFilePointer
CreateMutexA
Sleep
TerminateProcess
TerminateThread
WriteFile
lstrcpyA
lstrcpynA
lstrlenA
CreateThread
DeleteFileA

user32

ExitWindowsEx
CharUpperBuffA
CharToOemA

advapi32

GetUserNameA
RegDeleteValueA
RegCreateKeyExA
RegCloseKey
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA

crtdll

__GetMainArgs
atoi
exit
fclose
fopen
fputs
fwrite
malloc
mbstowcs
memcpy
memset
raise
rand
signal
sprintf
srand
strcat
strchr
strcmp
strncpy
strrchr
strstr
strtok

Sections

.text
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

c1775243125dda6ee0b501f5840b3b77

Headers

File Characteristics

Imports

ws2_32

shell32

kernel32

user32

advapi32

crtdll

Sections

.text Size: 32KB - Virtual size: 32KB

.bss Size: - Virtual size: 44KB

.data Size: 28KB - Virtual size: 28KB

.idata Size: 4KB - Virtual size: 4KB

.rsrc Size: 8KB - Virtual size: 8KB

.aspack Size: 8KB - Virtual size: 12KB

.adata Size: - Virtual size: 4KB

.text
Size: 32KB - Virtual size: 32KB

.bss
Size: - Virtual size: 44KB

.data
Size: 28KB - Virtual size: 28KB

.idata
Size: 4KB - Virtual size: 4KB

.rsrc
Size: 8KB - Virtual size: 8KB

.aspack
Size: 8KB - Virtual size: 12KB

.adata
Size: - Virtual size: 4KB