0c72838d7a6052469c4de87c7805a727_JaffaCakes118

General

Target

0c72838d7a6052469c4de87c7805a727_JaffaCakes118
Size

2.0MB
MD5

0c72838d7a6052469c4de87c7805a727
SHA1

58b3d12797673f3539cbd1951f423d42f5b36ab1
SHA256

b81f2ea1d21533067b6befda4f5d7aac638f29861dc8061390b93bde1aa1b9c1
SHA512

868160a3919258a85b61770144dbc03e19268fee897eb9d51b00dd1eab4f5aa3779eb0d01745232facb0827717b8930092f361e191c5653cf761f892081f5394
SSDEEP

24576:Ag6119vpVU7wiCyuIYTKcCLYESr9QCKkd3oCctVr+JK1mLD5+ZjePeVUUZOYvB0f:Ag6HVjyii8E4ld3oC8+hXBPYb7fAOCpv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0c72838d7a6052469c4de87c7805a727_JaffaCakes118

Files

0c72838d7a6052469c4de87c7805a727_JaffaCakes118
.exe windows:4 windows x86 arch:x86

19747623e6ab86cffa0fb0ad3e09e2ef

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

select
WSAInstallServiceClassW
sendto
WSASendDisconnect
WSASocketW
ioctlsocket
gethostbyaddr
inet_addr

oleaut32

SysFreeString
SafeArrayRedim

kernel32

ExitThread
GetConsoleMode
GetShortPathNameW
IsBadStringPtrA
CreateIoCompletionPort
GetTempPathW
GetDiskFreeSpaceExA
CreateProcessA
GetCurrentProcessId
ExitProcess
GetThreadContext
SetupComm
OpenMutexA
SwitchToFiber
VirtualAllocEx

user32

GetTopWindow
LoadStringA
CreateIconFromResource
GetMessageA
EnumDisplayDevicesA
AppendMenuA
mouse_event
GetWindowContextHelpId
SendNotifyMessageA
PeekMessageW
CreateDialogIndirectParamA
SetCaretPos
GetIconInfo
GetTabbedTextExtentA
ExcludeUpdateRgn
SetThreadDesktop
IsDialogMessageW
GetMonitorInfoA

advapi32

AccessCheckAndAuditAlarmW
AllocateLocallyUniqueId
SetKernelObjectSecurity
EqualSid
IsValidAcl
BuildTrusteeWithSidW
SetSecurityDescriptorDacl
AddAce
ChangeServiceConfigW
StartServiceW
GetAclInformation
ObjectCloseAuditAlarmA
RegQueryValueA
SetSecurityDescriptorGroup
RegFlushKey
GetPrivateObjectSecurity
UnlockServiceDatabase

comctl32

ImageList_GetBkColor
ImageList_SetImageCount

Sections

.text
Size: 3KB - Virtual size: 251KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1.8MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

19747623e6ab86cffa0fb0ad3e09e2ef

Headers

File Characteristics

Imports

ws2_32

oleaut32

kernel32

user32

advapi32

comctl32

Sections

.text Size: 3KB - Virtual size: 251KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 1.8MB - Virtual size: 1.8MB

.rsrc Size: 17KB - Virtual size: 16KB

.text
Size: 3KB - Virtual size: 251KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 1.8MB - Virtual size: 1.8MB

.rsrc
Size: 17KB - Virtual size: 16KB