0813a24fdfac18b249e59a215fe09975_JaffaCakes118

General

Target

0813a24fdfac18b249e59a215fe09975_JaffaCakes118
Size

108KB
MD5

0813a24fdfac18b249e59a215fe09975
SHA1

1363f31dea1a2d8aec6bd82305c1f88af7439f34
SHA256

d233128f0ef1c817429dec6922358665e0afb5f4d178a3b0becba7da17717c7b
SHA512

4413e5686775ea454cc1222423df0ae3f74777a3694cf489bf9d5c81c30f7b0e96e876b2942a9aae5b7e1745d0f881e7a613442e3636b6c6560e00c3a2e8925a
SSDEEP

1536:ruK1+0Kyid3fu1jeep4r4wSyv/bY09PeGC950G4Eytvfqfy465MLWX236ZeCpOP:SD7yyfWeep3yrY0sYGot3H12WX2gpW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0813a24fdfac18b249e59a215fe09975_JaffaCakes118

Files

0813a24fdfac18b249e59a215fe09975_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5497eee4a96f966cb3d7bdce6260d217

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
ExitProcess
WideCharToMultiByte
GetModuleFileNameA
CreateProcessA
SetFileAttributesA
SetTapePosition
CloseHandle
CreateToolhelp32Snapshot
Module32First
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
SetEndOfFile
GetProcAddress
GetOEMCP
GetACP
HeapFree
HeapAlloc
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
GetLastError
TerminateProcess
GetCurrentProcess
SetFilePointer
ReadFile
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
RtlUnwind
WriteFile
SetStdHandle
FlushFileBuffers
CreateFileA
GetCPInfo
GetStringTypeW

ws2_32

getservbyname
htons
recv
ntohs
send
recvfrom
htonl

Sections

.text
Size: 60KB - Virtual size: 59KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 158KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5497eee4a96f966cb3d7bdce6260d217

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

ws2_32

Sections

.text Size: 60KB - Virtual size: 59KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 4KB - Virtual size: 158KB

.rsrc Size: 36KB - Virtual size: 35KB

.text
Size: 60KB - Virtual size: 59KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 4KB - Virtual size: 158KB

.rsrc
Size: 36KB - Virtual size: 35KB