0e74d87bc203b22417c4a15fe1cf36d9_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

0e74d87bc203b22417c4a15fe1cf36d9_JaffaCakes118
Size

74KB
MD5

0e74d87bc203b22417c4a15fe1cf36d9
SHA1

2ec301fc4cb460c20dca952b880392fbb933f256
SHA256

34a9c75b083c7651e48d5dda7df35fa24368c47f428e5b525bcbb1c9626bb687
SHA512

3f9bf51e71a0cc6c4d9955cf8866147d459c1807f4e19d64b94c19d3fa9e378fb5c4ad0985df471acd7efcb6564a4dd48311fdc868071ea2848a9e2ad91e0a0e
SSDEEP

1536:82O5TefjucV+n67dd6jzE9E2Ozoi0SCwIF8g3mP:8lefj9dTgzoi0SCwIF8g3mP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0e74d87bc203b22417c4a15fe1cf36d9_JaffaCakes118

Files

0e74d87bc203b22417c4a15fe1cf36d9_JaffaCakes118
.exe windows:5 windows x86 arch:x86

6c17110299a333f3db788d06e2c3c8b8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

OutputDebugStringA
CloseHandle
CreateThread
GetCommandLineA
HeapSetInformation
GetStartupInfoW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
DecodePointer
TlsFree
GetModuleHandleW
SetLastError
GetCurrentThreadId
GetProcAddress
EnterCriticalSection
LeaveCriticalSection
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
HeapAlloc
HeapFree
IsProcessorFeaturePresent
GetFileAttributesA
RaiseException
WriteFile
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LCMapStringW
MultiByteToWideChar
GetStringTypeW
Sleep
SetFilePointer
GetConsoleCP
GetConsoleMode
RtlUnwind
GetExitCodeProcess
CreateProcessA
ReadFile
SetStdHandle
FlushFileBuffers
HeapSize
LoadLibraryW
HeapReAlloc
WriteConsoleW
CompareStringW
SetEnvironmentVariableA
CreateFileW
CreateMutexA
GetModuleFileNameA
SetFileAttributesA
GetLastError
FindFirstFileA
TerminateProcess
Beep
CreateEventA
SetEvent
WaitForSingleObject
GetCurrentProcess
GetComputerNameA
GetModuleFileNameW
ExitProcess

advapi32

GetUserNameA
OpenSCManagerA
SetServiceStatus
StartServiceA
CreateServiceA
RegisterServiceCtrlHandlerA
StartServiceCtrlDispatcherA
CloseServiceHandle

shell32

ShellExecuteA

ws2_32

accept
listen
send
closesocket
socket
bind
recv
WSACleanup
htons
htonl
inet_addr
WSAStartup
connect

Sections

.text
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 696B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6c17110299a333f3db788d06e2c3c8b8

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

advapi32

shell32

ws2_32

Sections

.text Size: 48KB - Virtual size: 48KB

.rdata Size: 14KB - Virtual size: 13KB

.data Size: 4KB - Virtual size: 11KB

.rsrc Size: 1024B - Virtual size: 696B

.reloc Size: 6KB - Virtual size: 5KB

.text
Size: 48KB - Virtual size: 48KB

.rdata
Size: 14KB - Virtual size: 13KB

.data
Size: 4KB - Virtual size: 11KB

.rsrc
Size: 1024B - Virtual size: 696B

.reloc
Size: 6KB - Virtual size: 5KB