fa57bb9ad3d809f7b501b9e10fc9ea8c_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

fa57bb9ad3d809f7b501b9e10fc9ea8c_JaffaCakes118
Size

175KB
MD5

fa57bb9ad3d809f7b501b9e10fc9ea8c
SHA1

5b983bc49319d73a6bb8eed2c31395abdceae9c5
SHA256

d493ec2068e501f3ca08e85d8cf9dcadc13429c1ff0d2a13ee4d49c85667e619
SHA512

b7051c89b19f5ac7ca12ce47fa523f7c126d30ada697ef80309f8b24bf631c9b5230356f4d69431947922bc7a8373b9be021d4b59f86e03ffaf8d442dc299c0a
SSDEEP

3072:XxOb6PTqb7WM22872rosLUfIND2JR4ITNJ4mzYMsys8OAg0Fujb9wuh:BOb6mv2287owfIxSWoOPAO9Ph

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fa57bb9ad3d809f7b501b9e10fc9ea8c_JaffaCakes118

Files

fa57bb9ad3d809f7b501b9e10fc9ea8c_JaffaCakes118
.exe windows:6 windows x86 arch:x86

5cfd589a5356ef9b7df73b16e54567da

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\yatzu\Desktop\DarkHVNC-main\Client\Release\Client.pdb

Imports

kernel32

CreateProcessA
GetThreadContext
SetThreadContext
GetWindowsDirectoryA
GetVersionExA
GetNativeSystemInfo
VirtualAllocEx
WriteProcessMemory
IsWow64Process
GetModuleHandleA
GetProcAddress
LoadResource
LockResource
SizeofResource
LoadLibraryA
LocalAlloc
lstrcmpA
lstrcpyA
lstrcatA
lstrlenA
FindResourceA
CopyFileA
CreateFileW
HeapSize
GetProcessHeap
ResumeThread
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
FindClose
ReadConsoleW
SetFilePointerEx
GetFileSizeEx
GetConsoleMode
GetConsoleOutputCP
FlushFileBuffers
GetFileType
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
TerminateThread
CreateThread
Sleep
WaitForSingleObject
GetLastError
CloseHandle
GetVolumeInformationA
GetTempPathA
GetFileSize
ReadFile
FindNextFileA
FindFirstFileA
CreateFileA
SetStdHandle
CreateDirectoryA
LCMapStringW
HeapReAlloc
HeapAlloc
HeapFree
WriteConsoleW
GetModuleHandleExW
ExitProcess
GetModuleFileNameW
WriteFile
GetStdHandle
LoadLibraryExW
EncodePointer
DecodePointer
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
DeleteCriticalSection
MultiByteToWideChar
WideCharToMultiByte
LCMapStringEx
GetStringTypeW
GetCPInfo
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
RaiseException
RtlUnwind
SetLastError
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary

user32

OpenDesktopA
PostMessageA
PrintWindow
MoveWindow
CreateDesktopA
wsprintfA
SendMessageA
SetThreadDesktop
GetWindowPlacement
RealGetWindowClassA
GetWindow
GetWindowThreadProcessId
GetTopWindow
FindWindowA
GetDesktopWindow
SetWindowLongA
GetWindowLongA
PtInRect
ChildWindowFromPoint
WindowFromPoint
ScreenToClient
GetWindowRect
ReleaseDC
GetDC
MenuItemFromPoint
GetMenuItemID
IsWindowVisible

gdi32

SetStretchBltMode
StretchBlt
SelectObject
GetDIBits
DeleteObject
DeleteDC
CreateCompatibleDC
CreateCompatibleBitmap
BitBlt

advapi32

RegQueryValueExA
RegOpenKeyExA
RegCloseKey
RegSetValueExA

shell32

SHGetFolderPathA
SHAppBarMessage

ws2_32

connect
htons
recv
send
socket
WSAStartup
gethostbyname

ntdll

NtQueryInformationProcess

shlwapi

StrStrA

Sections

.text
Size: 109KB - Virtual size: 109KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 53KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5cfd589a5356ef9b7df73b16e54567da

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

advapi32

shell32

ws2_32

ntdll

shlwapi

Sections

.text Size: 109KB - Virtual size: 109KB

.rdata Size: 53KB - Virtual size: 52KB

.data Size: 4KB - Virtual size: 7KB

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 7KB - Virtual size: 6KB

.text
Size: 109KB - Virtual size: 109KB

.rdata
Size: 53KB - Virtual size: 52KB

.data
Size: 4KB - Virtual size: 7KB

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 7KB - Virtual size: 6KB