0a7cc2861218ce713dcbd95371dddd88_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

0a7cc2861218ce713dcbd95371dddd88_JaffaCakes118
Size

41KB
MD5

0a7cc2861218ce713dcbd95371dddd88
SHA1

3249d2935e8c5bbb9faf6b8626312854fa53a293
SHA256

c384b38fd4c90f98afb7cfd8518add06a48d8bc248bac7e34acaae6aba23f94a
SHA512

c242527bec3798889f60c3029dc855f135b95fa8ecf87d4d5a5c395ea119e2ede42306b8938de7a04a47558f4b8882b3e795dd2dbc2ae7c5e4a834db266cdbda
SSDEEP

768:KFkvSroDctHKF8QyF1koIrsikrOmdqaJxTwFnp67sptDYRt:BvuoDctHKgkoWsiWdXxTInpRD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0a7cc2861218ce713dcbd95371dddd88_JaffaCakes118

Files

0a7cc2861218ce713dcbd95371dddd88_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7a1905d9a9d6c64a915708045d48e663

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

select
setsockopt
sendto
WSAStartup
WSASocketA
gethostbyname
inet_ntoa
inet_addr
WSAConnect
WSACleanup
htons
socket
connect
send
closesocket
recv

user32

wsprintfA

kernel32

GetStringTypeA
GetSystemTimeAsFileTime
GetCurrentThreadId
QueryPerformanceCounter
CloseHandle
CreateProcessA
ExitThread
ExitProcess
GetTempPathA
Sleep
lstrcmpA
GetTickCount
GetCurrentProcessId
HeapAlloc
GetProcessHeap
CreateThread
ReleaseMutex
MultiByteToWideChar
lstrcmpiA
SetFileAttributesA
GetLastError
CreateDirectoryA
GetModuleFileNameA
GetModuleHandleA
OpenMutexA
SetErrorMode
SetEvent
DeleteFileA
LocalFree
LocalAlloc
GetVersionExA
GetLocaleInfoA
WaitForSingleObject
GetStringTypeW
GetACP
GetOEMCP
GetCPInfo
LoadLibraryA
RtlUnwind
LCMapStringW
InterlockedExchange
VirtualQuery
SetEndOfFile
HeapSize
VirtualProtect
GetSystemInfo
LCMapStringA
CreateMutexA
CreateFileA
SetFilePointer
GetStartupInfoA
GetCommandLineA
HeapFree
WriteFile
GetProcAddress
TerminateProcess
GetCurrentProcess
ReadFile
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
SetStdHandle
FlushFileBuffers

advapi32

OpenSCManagerA
DeleteService
ControlService
CreateServiceA
LockServiceDatabase
QueryServiceLockStatusA
ChangeServiceConfig2A
UnlockServiceDatabase
OpenServiceA
StartServiceA
CloseServiceHandle
RegisterServiceCtrlHandlerA
SetServiceStatus
StartServiceCtrlDispatcherA

shell32

SHGetFolderPathA

Sections

.text
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

7a1905d9a9d6c64a915708045d48e663

Headers

File Characteristics

Imports

ws2_32

user32

kernel32

advapi32

shell32

Sections

.text Size: 31KB - Virtual size: 30KB

.rdata Size: 7KB - Virtual size: 6KB

.data Size: 2KB - Virtual size: 11KB

.text
Size: 31KB - Virtual size: 30KB

.rdata
Size: 7KB - Virtual size: 6KB

.data
Size: 2KB - Virtual size: 11KB