0793051947a886114acb3e934911bd40_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

0793051947a886114acb3e934911bd40_JaffaCakes118
Size

64KB
MD5

0793051947a886114acb3e934911bd40
SHA1

897a082bd558ae5435cf4509a654fc5f8281e8e6
SHA256

4745a6c28dc434694358ff66a49e1441183f9b4cabaad458abde589a22d83764
SHA512

4936bca81d93f0986f5da34ae108c90b8966d7b0bf907d44ebf124eb57ee63b4353115b9d56e7a357949308def827811d6102454907db209213f4464e41117b9
SSDEEP

768:XU4UNUM/xnDa8l0V2IArz/Ulu8xKc5TJXvOPK52J4U+grJgQglnDst9:EEQnhzqTx/ZJfOPgK+IKst

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0793051947a886114acb3e934911bd40_JaffaCakes118

Files

0793051947a886114acb3e934911bd40_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ace4568e25010ad81c08fcc0852ca0ca

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Process32First
CreateToolhelp32Snapshot
WaitForSingleObject
TerminateThread
GlobalLock
GlobalSize
GlobalUnlock
GetVersionExA
Process32Next
CompareStringW
CompareStringA
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
OpenProcess
TerminateProcess
CreatePipe
GetStartupInfoA
GetSystemDirectoryA
CreateProcessA
CloseHandle
ReadFile
GlobalAlloc
GlobalReAlloc
GlobalFree
CreateThread
DeleteFileA
Sleep
FindFirstFileA
FileTimeToLocalFileTime
FileTimeToSystemTime
GetLastError
FindNextFileA
FindClose
GetComputerNameA
GetDriveTypeA
SetEndOfFile
LoadLibraryA
GetProcAddress
SetEnvironmentVariableA
GetOEMCP
GetACP
GetCPInfo
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
CreateFileA
FlushFileBuffers
SetStdHandle
IsBadWritePtr
HeapReAlloc
VirtualAlloc
VirtualFree
GetTimeZoneInformation
GetSystemTime
GetLocalTime
RtlUnwind
GetModuleHandleA
GetCommandLineA
GetVersion
ExitProcess
HeapFree
WriteFile
GetCurrentProcess
SetHandleCount
GetStdHandle
GetFileType
SetFilePointer
HeapAlloc
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
GetEnvironmentVariableA
HeapDestroy
HeapCreate

user32

IsRectEmpty
GetSystemMetrics
keybd_event
GetDC
ReleaseDC
SetCursorPos
mouse_event

gdi32

GetStockObject
GetObjectA
SelectPalette
RealizePalette
GetDIBits
CreateDCA
CreateCompatibleDC
GetDeviceCaps
CreateCompatibleBitmap
SelectObject
BitBlt
DeleteDC
DeleteObject

advapi32

OpenSCManagerA
OpenServiceA
CloseServiceHandle
QueryServiceStatus
ControlService
DeleteService
GetUserNameA

shell32

SHGetFileInfoA
ShellExecuteA

ws2_32

shutdown
WSASocketA
htons
connect
inet_addr
send
recv
WSAStartup
closesocket

Sections

.text
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

ace4568e25010ad81c08fcc0852ca0ca

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ws2_32

Sections

.text Size: 40KB - Virtual size: 39KB

.rdata Size: 8KB - Virtual size: 4KB

.data Size: 12KB - Virtual size: 17KB

.text
Size: 40KB - Virtual size: 39KB

.rdata
Size: 8KB - Virtual size: 4KB

.data
Size: 12KB - Virtual size: 17KB