61141ebb9b219ddcc88e29c18aec5b6a_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

61141ebb9b219ddcc88e29c18aec5b6a_JaffaCakes118
Size

73KB
MD5

61141ebb9b219ddcc88e29c18aec5b6a
SHA1

99ed6d384cfed9b7b51da18defeb7f02fb30858e
SHA256

6f67017f54f6e70aeff1c37f3267477752f53b12da1bfc6a5f732fde7f61b112
SHA512

5f37dab5d1e2d87485bb52948ce1d98824aafeae6bf9f4a87e545c0449b4991c75d141b69cbdce460bc47f0131bba65237cfd5509f27f9d7c214c400fd9b88f5
SSDEEP

1536:FcMLnJ3U3EGVnID8SOe44UJDHA60CkbvS306rONH:aMLoEn8GZ+DHA6wA06rONH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
61141ebb9b219ddcc88e29c18aec5b6a_JaffaCakes118

Files

61141ebb9b219ddcc88e29c18aec5b6a_JaffaCakes118
.dll windows:4 windows x86 arch:x86

0676d8dd84e3456ed34f9bd352c3ea6d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

ws2_32

ntohs
inet_addr
getsockname
socket
bind
gethostbyname
connect
listen
accept
send
recv
WSAIoctl
WSAIsBlocking
sendto
select
__WSAFDIsSet
recvfrom
closesocket
WSASocketA
gethostname
htonl
WSARecv
WSACleanup
getservbyname
getservbyport
htons

msvcrt

strchr
strncpy
sprintf
isspace
getenv
wcscmp
__p__iob
isxdigit
isdigit
_write
_errno
_wcsnicmp
malloc
getc
wcstol
strcpy
strlen
wcscat
wcsrchr
wcscpy
toupper
wcslen
islower
fgets
_stricmp
fopen
fclose
_strnicmp
strpbrk
_wcsicmp
rewind
_except_handler3
fprintf
exit

ntdll

NtQuerySystemTime
RtlUnicodeStringToAnsiString
RtlNtStatusToDosError
RtlAnsiStringToUnicodeString
RtlInitAnsiString
RtlFreeAnsiString
NtQueryValueKey
NtOpenKey
RtlInitString
NlsMbOemCodePageTag
RtlxUnicodeStringToOemSize
RtlUnicodeStringToOemString
RtlInitUnicodeString
NtCreateFile
RtlAllocateHeap
NtDeviceIoControlFile
NtCancelIoFile
RtlFreeHeap
NtClose
RtlFreeUnicodeString
RtlCreateHeap
RtlDestroyHeap

kernel32

GetModuleHandleA
ExpandEnvironmentStringsA
MultiByteToWideChar
CreateEventW
CreateThread
ResumeThread
SetEvent
TerminateThread
ExpandEnvironmentStringsW
LoadLibraryW
GetProcAddress
FreeLibrary
DeviceIoControl
GetLastError
TlsSetValue
TlsFree
InitializeCriticalSection
TlsAlloc
DeleteCriticalSection
GetSystemInfo
ReleaseMutex
LocalFree
CreateFileA
CreateMutexA
WaitForSingleObject
SetLastError
TlsGetValue
FormatMessageA
CreateEventA
LeaveCriticalSection
WaitForMultipleObjects
CloseHandle
WriteFile
EnterCriticalSection
ReadFile
GetConsoleMode
SetConsoleMode
Sleep
GetTickCount

user32

PostMessageA
wsprintfW

advapi32

GetUserNameA
RegSetValueExA
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
RegEnumKeyExW
RegCloseKey
RegCreateKeyExW
RegSetValueExW
RegDeleteKeyW
RegOpenKeyExW
RegQueryValueExW

rpcrt4

UuidToStringW
UuidCreate
RpcStringFreeW
UuidFromStringW

Exports

Exports

AcceptEx
EnumProtocolsA
EnumProtocolsW
GetAcceptExSockaddrs
GetAddressByNameA
GetAddressByNameW
GetNameByTypeA
GetNameByTypeW
GetServiceA
GetServiceW
GetTypeByNameA
GetTypeByNameW
MigrateWinsockConfiguration
NPLoadNameSpaces
SetServiceA
SetServiceW
TransmitFile
WSARecvEx
dn_expand
getnetbyname
inet_network
rcmd
rexec
rresvport
s_perror
sethostname

Sections

.text
Size: 47KB - Virtual size: 46KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 1024B - Virtual size: 662B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0676d8dd84e3456ed34f9bd352c3ea6d

Headers

File Characteristics

Imports

ws2_32

msvcrt

ntdll

kernel32

user32

advapi32

rpcrt4

Exports

Exports

Sections

.text Size: 47KB - Virtual size: 46KB

.rdata Size: 7KB - Virtual size: 7KB

.data Size: 2KB - Virtual size: 3KB

.edata Size: 1024B - Virtual size: 662B

.rsrc Size: 6KB - Virtual size: 6KB

.reloc Size: 5KB - Virtual size: 4KB

.text
Size: 47KB - Virtual size: 46KB

.rdata
Size: 7KB - Virtual size: 7KB

.data
Size: 2KB - Virtual size: 3KB

.edata
Size: 1024B - Virtual size: 662B

.rsrc
Size: 6KB - Virtual size: 6KB

.reloc
Size: 5KB - Virtual size: 4KB