4d94823958bcfcf28c4e689b8649aa4a_JaffaCakes118

General

Target

4d94823958bcfcf28c4e689b8649aa4a_JaffaCakes118
Size

28KB
MD5

4d94823958bcfcf28c4e689b8649aa4a
SHA1

32bc0146675e7e7f44c445c1c712b9954f53b93c
SHA256

f1bcaec4b222f7a0cda75c61aaffaa539cd18230e845b739228b204ac37e00cb
SHA512

156f1b1b1125e5b8c235892ded9bc4bbc53f92373fb4222bcd254dc905f566f30dba92f21465245c38675f00f6641fcf2fe929da1901b7fbd3bca303f9ce010e
SSDEEP

384:UMTNo5/hpYGkJfYyo/cSvtk6i54RUZ/Xg:Y5pYYyo/cSlk4RUZ/Xg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4d94823958bcfcf28c4e689b8649aa4a_JaffaCakes118

Files

4d94823958bcfcf28c4e689b8649aa4a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c794b944bc1ddb491018d70a5eb5b1ba

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitThread
OutputDebugStringA
Sleep
GetCurrentProcessId
lstrcpyA
lstrcatA
CreateProcessA
GetTickCount
GlobalMemoryStatusEx
GetSystemInfo
CloseHandle
WaitForSingleObject
GetModuleHandleA
GetStartupInfoA
LoadLibraryA
CreateThread
GetProcAddress

user32

wsprintfA

advapi32

RegCloseKey
RegQueryValueExA

shell32

SHGetSpecialFolderPathA

ws2_32

select
__WSAFDIsSet
setsockopt
WSAIoctl
recv
send
WSAStartup
WSASocketA
WSAGetLastError
shutdown
htonl
WSACleanup
sendto
socket
htons
connect
closesocket
inet_addr
gethostbyname

iphlpapi

GetIfTable

msvcrt

fprintf
strstr
_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
_XcptFilter
_exit
??1type_info@@UAE@XZ
_iob
strrchr
??3@YAXPAX@Z
_CxxThrowException
__CxxFrameHandler
exit
malloc
rand
srand
sprintf
printf
??2@YAPAXI@Z
_except_handler3
free

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c794b944bc1ddb491018d70a5eb5b1ba

Headers

File Characteristics

Imports

kernel32

user32

advapi32

shell32

ws2_32

iphlpapi

msvcrt

Sections

.text Size: 12KB - Virtual size: 11KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 4KB - Virtual size: 2KB

.rsrc Size: 4KB - Virtual size: 16B

.text
Size: 12KB - Virtual size: 11KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 4KB - Virtual size: 2KB

.rsrc
Size: 4KB - Virtual size: 16B