0c283a2c1e818952c0f4a4426b322bce_JaffaCakes118

General

Target

0c283a2c1e818952c0f4a4426b322bce_JaffaCakes118
Size

40KB
MD5

0c283a2c1e818952c0f4a4426b322bce
SHA1

4d91ac4f0a876fb4e881f0989e2a795e7e84b4e3
SHA256

92ac445bf756babe08008b6c12c5a92a182e07d95d1ef2aa1e3a7069bc747c1c
SHA512

510e11130d2f2b6e2e6397fa04635e58aa12ffe606429871c4022aada1aedb7df9377178f669768927bace4b8b977f68ccce50d6f5af5635299a8ba3d707e1c9
SSDEEP

768:UClbzu2CRCexs20ElD9IQhB9KuBVmm0houD:Pu2CtzD9I2BT6o

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0c283a2c1e818952c0f4a4426b322bce_JaffaCakes118

Files

0c283a2c1e818952c0f4a4426b322bce_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7b45a1f2cc8e60072ddb72e8fa6191aa

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

send
closesocket
socket
inet_addr
htons
connect
getsockname
gethostbyaddr
gethostbyname
WSAStartup
recv

user32

GetAsyncKeyState
wsprintfA
GetKeyState
GetForegroundWindow
GetWindowTextA

kernel32

HeapDestroy
FlushFileBuffers
ReadFile
SetStdHandle
LoadLibraryA
GetProcAddress
GetOEMCP
GetACP
GetCPInfo
GetStringTypeW
GetStringTypeA
SetFilePointer
GetLastError
WriteFile
RtlUnwind
GetFileType
GetStdHandle
SetHandleCount
Sleep
CreateThread
SetErrorMode
lstrcatA
lstrlenA
CloseHandle
TerminateProcess
OpenProcess
Process32Next
Process32First
CreateToolhelp32Snapshot
HeapAlloc
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapCreate
VirtualFree
HeapFree
VirtualAlloc
HeapReAlloc
WideCharToMultiByte
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

7b45a1f2cc8e60072ddb72e8fa6191aa

Headers

File Characteristics

Imports

ws2_32

user32

kernel32

Sections

.text Size: 28KB - Virtual size: 27KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 4KB - Virtual size: 9KB

.text
Size: 28KB - Virtual size: 27KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 4KB - Virtual size: 9KB