18f6dbd4d95d1f3c157b94bb6587b449_JaffaCakes118

General

Target

18f6dbd4d95d1f3c157b94bb6587b449_JaffaCakes118
Size

10KB
MD5

18f6dbd4d95d1f3c157b94bb6587b449
SHA1

0547eea4326e30b0246e3517f9459ced4ddfd005
SHA256

9eb34cefb4487af0f8f24bbe2340549cb1bb8bbe73d23d42c2c28a2532c9633a
SHA512

42049db6e856e28ce12408e3a29c4d5acfa7fd85c1ad0ebc2f8bd9219ca16d9f310d24c5777916370cdc0692018c0d2412388dd3eabf9ee66633f8f17a049664
SSDEEP

192:lV3kXwx7OnlMoSVH4ebaC69i4/xgX8eSXam25gdYWL6VSUgLCf8UIkc/U5:lVUAx7oS14xbNKkLLCkUIkwU5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
18f6dbd4d95d1f3c157b94bb6587b449_JaffaCakes118

Files

18f6dbd4d95d1f3c157b94bb6587b449_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4fbe6cf7e796829b08b3fec2f90c73b7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

getpeername
WSAStartup
htons

shlwapi

wnsprintfA
StrStrIA
StrStrA

kernel32

RtlUnwind
HeapAlloc
GetProcessHeap
HeapFree
HeapDestroy
lstrcatA
lstrcpyA
HeapCreate
lstrlenA
OpenFile
SetFileAttributesA
GetLastError
CloseHandle
lstrcmpiA
Process32Next
CreateRemoteThread
SetLastError
WriteProcessMemory
VirtualAllocEx
ReadProcessMemory
OpenProcess
CreateToolhelp32Snapshot
GetCurrentProcessId
CreateMutexA
OpenMutexA
Sleep
CreateThread
WriteFile
SetFilePointer
ReadFile
GetFileSize
CreateFileA
VirtualQuery
FindClose
FindFirstFileA
ResumeThread
SuspendThread
WaitForSingleObject
GetEnvironmentVariableA
ExitThread
GetProcAddress
GetModuleHandleA
GetCurrentProcess
GetTickCount
InterlockedExchange
GetACP
GetLocaleInfoA
GetThreadLocale
GetVersionExA
RaiseException
MultiByteToWideChar
lstrlenW
FindNextFileA

user32

wsprintfA

advapi32

RegQueryValueExA
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
RegOpenKeyExA
RegCloseKey

ole32

CoInitialize
CoUninitialize
CoCreateInstance

oleaut32

SafeArrayPutElement
SafeArrayCreate
SysFreeString
SysAllocStringLen

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 2.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

4fbe6cf7e796829b08b3fec2f90c73b7

Headers

File Characteristics

Imports

ws2_32

shlwapi

kernel32

user32

advapi32

ole32

oleaut32

Sections

.text Size: 6KB - Virtual size: 5KB

.rdata Size: 3KB - Virtual size: 2KB

.data Size: 512B - Virtual size: 2.9MB

.text
Size: 6KB - Virtual size: 5KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 512B - Virtual size: 2.9MB