General

Malware Config

Signatures

Files

• 5962f01370e24e31dd77a86d3635c0e1_JaffaCakes118

  .exe windows:4 windows x86 arch:x86

  a7b4799da9653208616da857a108655c

  
  

  Headers

  File Characteristics

  IMAGE_FILE_RELOCS_STRIPPED

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DEBUG_STRIPPED

  Imports

  ws2_32

  recvfrom

  socket

  ioctlsocket

  accept

  WSAGetLastError

  gethostname

  select

  closesocket

  getsockname

  setsockopt

  bind

  htons

  recv

  __WSAFDIsSet

  getsockopt

  htonl

  WSAStartup

  ntohs

  send

  connect

  listen

  ntohl

  getaddrinfo

  WSACleanup

  gethostbyname

  getpeername

  shutdown

  inet_addr

  WSAEnumNetworkEvents

  getnameinfo

  WSASetLastError

  sendto

  freeaddrinfo

  user32

  GetProcessWindowStation

  wsprintfA

  GetUserObjectInformationW

  GetDesktopWindow

  MessageBoxW

  MessageBoxA

  winmm

  timeGetTime

  crypt32

  CertOpenSystemStoreA

  CertEnumCertificatesInStore

  CertCloseStore

  msvcrt

  _vsnprintf

  _stat

  feof

  fsetpos

  strftime

  __pioinfo

  _snwprintf

  strlen

  vfprintf

  memcmp

  wcsstr

  wcslen

  _unlock

  _rmdir

  atof

  _getch

  memcpy

  ftell

  fwprintf

  isalpha

  __mb_cur_max

  _read

  isspace

  _lock

  rand

  _initterm

  __dllonexit

  fopen

  abort

  srand

  _errno

  mktime

  isalnum

  _close

  gmtime

  strcat

  _write

  ferror

  _lseeki64

  _filelengthi64

  _wfindfirst

  calloc

  fgetc

  strncmp

  _wfopen

  __doserrno

  putchar

  time

  _findclose

  strspn

  signal

  _ftime

  fseek

  fgets

  _stricmp

  fread

  _ftime64

  _unlink

  _fstati64

  fprintf

  _fileno

  longjmp

  strerror

  isprint

  raise

  free

  rename

  tolower

  puts

  fgetpos

  malloc

  strncat

  islower

  setvbuf

  strcspn

  _get_osfhandle

  fwrite

  _iob

  _amsg_exit

  strtol

  wcscpy

  getenv

  atoi

  _fdopen

  realloc

  fputs

  _getpid

  ungetc

  bsearch

  localeconv

  sscanf

  _putenv

  _strdup

  strstr

  _stati64

  sprintf

  strcpy

  _setmode

  putc

  memmove

  _endthreadex

  fclose

  strchr

  _beginthreadex

  __setusermatherr

  fputc

  strtoul

  _exit

  _onexit

  setlocale

  strrchr

  getc

  strcmp

  fflush

  _wfindnext

  qsort

  _strnicmp

  isxdigit

  strncpy

  _mkdir

  _access

  exit

  printf

  _setjmp3

  memchr

  isupper

  localtime

  _open

  log10

  toupper

  memset

  gdi32

  DeleteObject

  BitBlt

  GetDeviceCaps

  CreateCompatibleBitmap

  CreateCompatibleDC

  GetBitmapBits

  GetObjectA

  DeleteDC

  SelectObject

  CreateDCA

  kernel32

  FindFirstFileA

  GetLastError

  TlsGetValue

  GetProcessAffinityMask

  OpenProcess

  lstrcpynA

  GlobalAlloc

  SetProcessAffinityMask

  Sleep

  GetSystemDirectoryA

  GlobalHandle

  GetCurrentThreadId

  ExitProcess

  ResumeThread

  GetThreadContext

  WaitForSingleObject

  ResetEvent

  TlsSetValue

  GetTickCount

  GetCurrentThread

  TlsAlloc

  QueryPerformanceFrequency

  SuspendThread

  FindNextFileA

  IsDBCSLeadByteEx

  GetTempPathA

  SetUnhandledExceptionFilter

  TlsFree

  CloseHandle

  SetEvent

  VirtualProtect

  GetTimeZoneInformation

  GetVersion

  GetModuleHandleExA

  DuplicateHandle

  LoadLibraryA

  WaitForMultipleObjects

  VirtualQuery

  SetLastError

  LeaveCriticalSection

  lstrcpyA

  CreateSemaphoreA

  GetProcAddress

  GetThreadPriority

  ReleaseSemaphore

  GetModuleHandleA

  SetThreadContext

  DeleteCriticalSection

  SetThreadPriority

  SetThreadAffinityMask

  GetStdHandle

  QueryPerformanceCounter

  EnterCriticalSection

  GlobalMemoryStatus

  CreateEventA

  advapi32

  ReportEventA

  CryptReleaseContext

  RegisterEventSourceA

  CryptGenRandom

  CryptAcquireContextA

  Sections

  .text

  Size: 66KB - Virtual size: 68KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: 212KB - Virtual size: 211KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rdata

  Size: 43KB - Virtual size: 43KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .bss

  Size: - Virtual size: 16KB

  IMAGE_SCN_CNT_UNINITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .idata

  Size: 5KB - Virtual size: 5KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .CRT

  Size: 512B - Virtual size: 52B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .tls

  Size: 512B - Virtual size: 32B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE