0c5296ebb71130f7b5a71f009da5704a_JaffaCakes118

General

Target

0c5296ebb71130f7b5a71f009da5704a_JaffaCakes118
Size

44KB
MD5

0c5296ebb71130f7b5a71f009da5704a
SHA1

d77c40f8440756f758ee09a50ee2e67c3db50675
SHA256

92bf3297c6a5b6928b07dd9df145a8cc1508db33450a8940c5c725db0ae2b453
SHA512

88d8fd51896b4d6cc9be3309c7535e9213883a7580d03eb73eeec9aa3999f5889c2f69408790b9d71ef2b2873686aa099095a07266a905df7676098dcb284917
SSDEEP

768:EDpEyYCSi7TH06v5oUzatNmXEv0aGiSxMM:ES4SinR576UXEcQSxMM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0c5296ebb71130f7b5a71f009da5704a_JaffaCakes118

Files

0c5296ebb71130f7b5a71f009da5704a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f09a1c23d321fb632dda90c28f4e8393

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

FindWindowA
CharLowerA

oleaut32

VariantClear
SysFreeString
SysAllocString

msvcrt

_onexit
_exit
__dllonexit
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
??1type_info@@UAE@XZ
_controlfp
_CxxThrowException
wcslen
atoi
fgets
fclose
fprintf
_except_handler3
fopen
strcat
strchr
strstr
memcpy
_vsnprintf
strcmp
strtok
srand
strncpy
memcmp
strlen
_snprintf
memset
rand
strcpy
??2@YAPAXI@Z
__CxxFrameHandler
malloc
sprintf
realloc
free
_stricmp
_XcptFilter
__set_app_type

kernel32

WideCharToMultiByte
MultiByteToWideChar
GetStartupInfoA
LocalFree
TerminateThread
CreateFileA
WriteFile
GetWindowsDirectoryA
SetFileAttributesA
CopyFileA
GetFileAttributesA
GetVersionExA
GetLocaleInfoA
CreateMutexA
GetTickCount
ReleaseMutex
ExitThread
GetCurrentProcess
CloseHandle
LoadLibraryA
GetProcAddress
GetModuleHandleA
GetModuleFileNameA
ExpandEnvironmentStringsA
CreateProcessA
WaitForSingleObject
lstrcmpiA
Sleep
CreateThread
GetLastError
GetTempPathA
InterlockedDecrement
ExitProcess
lstrlenA

advapi32

RegDeleteValueA
RegQueryValueExA
GetUserNameA
RegCloseKey
RegCreateKeyExA
RegSetValueExA

ws2_32

socket
ioctlsocket
connect
closesocket

Sections

.text
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 276KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

f09a1c23d321fb632dda90c28f4e8393

Headers

File Characteristics

Imports

user32

oleaut32

msvcrt

kernel32

advapi32

ws2_32

Sections

.text Size: 28KB - Virtual size: 26KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 8KB - Virtual size: 276KB

.text
Size: 28KB - Virtual size: 26KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 8KB - Virtual size: 276KB