f19f4402d84bf9fc90f5568e5717f583_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

f19f4402d84bf9fc90f5568e5717f583_JaffaCakes118
Size

280KB
MD5

f19f4402d84bf9fc90f5568e5717f583
SHA1

aff282fc90a8f4ee3268ca4573ebfd66c613b3c2
SHA256

50fca9c37ac347ee84c753e0bbb2a76e5b70b8f8e520b217939f0323c7248266
SHA512

8ccc37ef2a12c018967a5c4dc5f298994e58d8d40ea9648a100b1832e2626b665344dd539bae8057e14eb9194e38db8fd63137d18cbcb4ea524f58408756bde7
SSDEEP

3072:k2qGOff8E+JnqtoDUx74rbQNdfRm7GyjIL:k2qV2nq0Ux70bQjZmaRL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f19f4402d84bf9fc90f5568e5717f583_JaffaCakes118

Files

f19f4402d84bf9fc90f5568e5717f583_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2c391bf0fab209f10c5c9e2babbdefdc

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetConsoleTextAttribute
SetLastError
GetLastError
CloseHandle
ReadFile
ExitProcess
SetConsoleMode
SetUnhandledExceptionFilter
GetFileSize
OpenFile
GetStdHandle
GetModuleHandleA
WriteProcessMemory
OpenProcess
CreateRemoteThread
WaitForSingleObject
GetProcAddress
ExitThread
WinExec
CreateProcessA
_lwrite
_lread
_lopen
_lcreat
WriteFileEx
CreateFileA
WriteFile
LoadLibraryA
VirtualProtect

ws2_32

socket
accept
bind
closesocket
connect
gethostbyaddr
gethostbyname
gethostname
listen
recv
send
shutdown
htons
WSAStartup
inet_addr
WSASocketA

urlmon

URLDownloadToFileA
URLDownloadToCacheFileA

msvcrt

printf
system
fwrite
strstr
_onexit
__dllonexit
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_memicmp
_strlwr
_strupr
tolower
strlen
_chkesp
sprintf
malloc
free
_vsnprintf
__CxxFrameHandler
strcpy
exit
_XcptFilter
__p___initenv
_strnicmp
toupper
fopen
memcpy
strcmp
memset
pow
_pctype
_isctype
__mb_cur_max
strcat
_exit

Sections

.text
Size: 148KB - Virtual size: 144KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 32KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.temp
Size: 76KB - Virtual size: 74KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

2c391bf0fab209f10c5c9e2babbdefdc

Headers

File Characteristics

Imports

kernel32

ws2_32

urlmon

msvcrt

Sections

.text Size: 148KB - Virtual size: 144KB

.rdata Size: 32KB - Virtual size: 30KB

.data Size: 4KB - Virtual size: 3KB

.idata Size: 4KB - Virtual size: 2KB

.reloc Size: 12KB - Virtual size: 8KB

.temp Size: 76KB - Virtual size: 74KB

.text
Size: 148KB - Virtual size: 144KB

.rdata
Size: 32KB - Virtual size: 30KB

.data
Size: 4KB - Virtual size: 3KB

.idata
Size: 4KB - Virtual size: 2KB

.reloc
Size: 12KB - Virtual size: 8KB

.temp
Size: 76KB - Virtual size: 74KB