08d0e858b41a87ed7823bf05c095007c_JaffaCakes118

General

Target

08d0e858b41a87ed7823bf05c095007c_JaffaCakes118
Size

45KB
MD5

08d0e858b41a87ed7823bf05c095007c
SHA1

7f52d69c67e6fd13a8e6fcee8843c183b7870141
SHA256

93f1dfb427bb0610bb37cec135b10e88cbf9121a964cf354adf2e723e890f959
SHA512

6556db1fadab779e6a3571a2d45cc2445f4dec38712765eabd20bb8531384b97060902958587a8f7273ced32a68846c82fe157d8d24d53dc551a1497f1a28829
SSDEEP

768:vrKg6cbSOtxdpUnSG1q5eXnppMd2gr/0z0+XXV2GiXqyNRjNnVYLowrRL2adOnE2:DKgBSOtp50Q2g00+HV2Gm58owrt2adOf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
08d0e858b41a87ed7823bf05c095007c_JaffaCakes118

Files

08d0e858b41a87ed7823bf05c095007c_JaffaCakes118
.exe .js windows:5 windows x86 arch:x86 polyglot

a50ab9c880c92afd7862b990df6c50b5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\hotsend\Release-Win32\hotsend.pdb

Imports

kernel32

HeapAlloc
HeapFree
OutputDebugStringA
CloseHandle
LeaveCriticalSection
SetEvent
EnterCriticalSection
WaitForSingleObject
ResumeThread
CreateThread
CreateEventA
InitializeCriticalSection
HeapCreate
GetTimeZoneInformation
GetLocalTime
GetSystemTimeAsFileTime
CreateMutexA
GetTickCount
Sleep
GetTempPathA
ReadFile
GetFileSize
CreateFileA
WriteFile
WaitForMultipleObjects
GetSystemTime
lstrlenA
lstrcpynA
lstrcmpA
lstrcpyA
lstrcatA
lstrcmpiA
GetModuleHandleA
GetLastError
SystemTimeToFileTime
ExitProcess
GetStartupInfoA

ole32

CoCreateGuid

ws2_32

gethostbyname
inet_addr
connect
htons
closesocket
socket
recv
WSAStartup
send

secur32

FreeCredentialsHandle
InitSecurityInterfaceA

msvcrt

strncpy
memchr
_vsnprintf
_except_handler3
_itoa
atoi
strchr
_snprintf
strstr
_stricmp
qsort
free
malloc
memmove
sprintf
sscanf
_c_exit
_exit
_XcptFilter
_cexit
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
memset

Sections

.text
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 688B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a50ab9c880c92afd7862b990df6c50b5

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

ole32

ws2_32

secur32

msvcrt

Sections

.text Size: 24KB - Virtual size: 23KB

.rdata Size: 7KB - Virtual size: 7KB

.data Size: 12KB - Virtual size: 13KB

.rsrc Size: 1024B - Virtual size: 688B

.text
Size: 24KB - Virtual size: 23KB

.rdata
Size: 7KB - Virtual size: 7KB

.data
Size: 12KB - Virtual size: 13KB

.rsrc
Size: 1024B - Virtual size: 688B