0d08dbd14014daa533236f81ec1b7688_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

0d08dbd14014daa533236f81ec1b7688_JaffaCakes118
Size

371KB
MD5

0d08dbd14014daa533236f81ec1b7688
SHA1

7643af866c0ac14afcd35f516b55aebf7ae3cd9d
SHA256

9ae882f0a37f3d6ddd5f5a6a56743dcc399fb6b805029ce75c83425d09ae6f5e
SHA512

ac6a2ddbadd456808dab7cf162180d0219bcf8e7762aca506ef71359d7ea35d515a3ed356de4e8f4d08f2ed0b523150cfa09633e67b0ef96fcefc1eab72c428f
SSDEEP

6144:hiww9qfRQEbFyHdfWxUeBo50j3nNfnIsfPuukHIwLg/12dm02oYMC7xBE4CDxd81:hNRFbCWCeC50j3nZ3uukHIwM42oYMexN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0d08dbd14014daa533236f81ec1b7688_JaffaCakes118

Files

0d08dbd14014daa533236f81ec1b7688_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0b1bae4cfca4b36603b0d62bcc8cb90e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalMemoryStatusEx
lstrcpyA
GetComputerNameA
GetLocaleInfoW
Sleep
CreateThread
FreeLibrary
GetProcAddress
LoadLibraryA
SetFileAttributesA
GetModuleFileNameA
GetLastError
CloseHandle
ReleaseMutex
OpenMutexA
WinExec
GetTempPathA
ResumeThread
CreateProcessA
SetThreadPriority
GetCurrentThread
SetPriorityClass
GetCurrentProcess
lstrcatA
GetEnvironmentVariableA
GetShortPathNameA
WaitForSingleObject
ExitProcess
CreateMutexA
WriteFile
CreateFileA
GetVersion
DeviceIoControl
GetModuleHandleA
CopyFileA
SetEnvironmentVariableA
CompareStringW
CompareStringA
FlushFileBuffers
LCMapStringW
LCMapStringA
SetStdHandle
GetOEMCP
GetACP
GetCPInfo
GetStringTypeW
GetStringTypeA
LocalAlloc
InterlockedExchange
RaiseException
GetTickCount
GetSystemDirectoryA
ExitThread
TerminateProcess
HeapReAlloc
HeapAlloc
GetSystemTimeAsFileTime
GetCurrentThreadId
TlsSetValue
GetTimeZoneInformation
GetSystemTime
GetLocalTime
HeapFree
RtlUnwind
GetStartupInfoA
GetCommandLineA
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
TlsAlloc
SetLastError
TlsGetValue
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
SetFilePointer
InterlockedDecrement
InterlockedIncrement
MultiByteToWideChar

shell32

ShellExecuteA
ord68

ws2_32

select
__WSAFDIsSet
recv
setsockopt
WSAIoctl
WSAStartup
htons
socket
connect
send
shutdown
closesocket
WSACleanup
inet_addr
gethostbyname
sendto
WSASocketA
htonl

Sections

.text
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 316KB - Virtual size: 315KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0b1bae4cfca4b36603b0d62bcc8cb90e

Headers

File Characteristics

Imports

kernel32

shell32

ws2_32

Sections

.text Size: 41KB - Virtual size: 41KB

.rdata Size: 6KB - Virtual size: 5KB

.data Size: 7KB - Virtual size: 13KB

.rsrc Size: 316KB - Virtual size: 315KB

.text
Size: 41KB - Virtual size: 41KB

.rdata
Size: 6KB - Virtual size: 5KB

.data
Size: 7KB - Virtual size: 13KB

.rsrc
Size: 316KB - Virtual size: 315KB