fc2e292dab17bfecb51fb6b88b141bde_JaffaCakes118

General

Target

fc2e292dab17bfecb51fb6b88b141bde_JaffaCakes118
Size

25KB
MD5

fc2e292dab17bfecb51fb6b88b141bde
SHA1

79c1794050ffccb69c0d056be10237b83902a35a
SHA256

f3a92c969ec5cc7d0b80194e891d49eb17a5fa351ede2f4e69f2cd357dc2f160
SHA512

aa5061d12b71b9293a3e72ab012532dabf8b5b2fa94e47ef58ae3ef5f29c194ad29c59534f2508a181bf02b9adddb37f70fb83ee0166753516a61de9f436bbba
SSDEEP

384:hQmPu7+wzCyiuTbgYF2ekqyVjnLvS/IeNZBji7Aj6JQLEppGPC15:hQmU4yiGhJkqyVzLK/zRjT6GLG5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fc2e292dab17bfecb51fb6b88b141bde_JaffaCakes118

Files

fc2e292dab17bfecb51fb6b88b141bde_JaffaCakes118
.dll windows:4 windows x86 arch:x86

c2a228304937d20a0bec2cd61af87cb0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

ws2_32

bind
getpeername
accept
setsockopt
ntohs
socket
connect
shutdown
WSAGetLastError
__WSAFDIsSet
select
recv
inet_addr
WSAStartup
gethostbyname
inet_ntoa
htons
send
closesocket

user32

wsprintfA

wininet

InternetQueryDataAvailable
HttpQueryInfoA
InternetCloseHandle

msvcrt

floor
_ftol
sscanf
fputs
sprintf
malloc
isspace
_strnicmp
free
_initterm
_adjust_fdiv
time
fopen
fgets
fclose
strstr
strchr
atoi

kernel32

lstrcatA
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetModuleFileNameA
CopyFileA
SetFileAttributesA
WinExec
CreateThread
lstrcpynA
lstrcmpiA
GetLastError
Sleep
SetLastError
WriteFile
WaitForSingleObject
DeleteFileA
GetSystemDirectoryA
GetFileAttributesA
CreateToolhelp32Snapshot
Process32First
Process32Next
OpenProcess
lstrlenA
LoadLibraryA
lstrcpyA
GetCurrentProcess
CloseHandle
GetModuleHandleA
GetProcAddress
GetTickCount
GetVersionExA

Exports

Exports

InjectToProcess

Sections

.text
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c2a228304937d20a0bec2cd61af87cb0

Headers

File Characteristics

Imports

ws2_32

user32

wininet

msvcrt

kernel32

Exports

Exports

Sections

.text Size: 18KB - Virtual size: 18KB

.data Size: 4KB - Virtual size: 19KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 18KB - Virtual size: 18KB

.data
Size: 4KB - Virtual size: 19KB

.reloc
Size: 1KB - Virtual size: 1KB