220f68a760bbea92d7176f3a09e80eb4_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

220f68a760bbea92d7176f3a09e80eb4_JaffaCakes118
Size

43KB
MD5

220f68a760bbea92d7176f3a09e80eb4
SHA1

bb21cfb6c4a34d035ee41022194975373a207fd4
SHA256

9801660b31370416918150b23467a826f24cee45ca73b7cfd4f533975efafb40
SHA512

2efc74f385dabea890c1428087b80c6d93934a92bc8672cfb4c9bafa818a94465078a7f432a0de04a42c7bfb2af4942c58d1bc7b973e7078f7cd3646ffb09427
SSDEEP

768:knYBkDeqJTQ3zlEAPHm+oVULyx6pdnt/h4m:MYOqZEAPH/yYt/v

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
220f68a760bbea92d7176f3a09e80eb4_JaffaCakes118

Files

220f68a760bbea92d7176f3a09e80eb4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

175b249d270a500997cdc25e047a865f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

WSACleanup
connect
socket
htons
getsockname
inet_addr
gethostbyname
WSAStartup
closesocket
recv
select
send

advapi32

RegSetValueExA
RegCloseKey
RegDeleteKeyA
RegDeleteValueA
RegCreateKeyExA

kernel32

ReadFile
SetEndOfFile
LocalFree
GetProcAddress
GetOEMCP
GetACP
RaiseException
SetUnhandledExceptionFilter
IsBadCodePtr
LoadLibraryA
Sleep
GetTickCount
ExitThread
ExitProcess
GetLastError
CreateMutexA
SetErrorMode
CopyFileA
SetFileAttributesA
GetFileAttributesA
lstrcmpiA
GetWindowsDirectoryA
GetModuleFileNameA
GetModuleHandleA
lstrlenA
CreateThread
CloseHandle
CreateProcessA
ExpandEnvironmentStringsA
DeviceIoControl
CreateFileA
GetSystemDefaultLangID
GlobalUnlock
GlobalLock
GlobalAlloc
GetComputerNameA
GetLocaleInfoA
TerminateThread
WaitForSingleObject
GetTempPathA
SetFilePointer
RtlUnwind
GetFileType
GetStdHandle
GetStringTypeA
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
WriteFile
HeapReAlloc
VirtualAlloc
HeapFree
GetCPInfo
FlushFileBuffers
SetStdHandle
GetStringTypeW
VirtualFree
HeapCreate
HeapDestroy
LCMapStringW
LCMapStringA
MultiByteToWideChar
WideCharToMultiByte
GetVersion
HeapAlloc
GetStartupInfoA
GetCommandLineA

user32

BlockInput
SetForegroundWindow
SetFocus
ShowWindow
keybd_event
VkKeyScanA
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
SendMessageA
FindWindowExA
CharLowerBuffA
FindWindowA
IsWindow

shlwapi

PathRemoveFileSpecA

ole32

CoCreateInstance
CoInitialize
CoUninitialize

oleaut32

VariantClear
SysAllocString
VariantInit

Sections

.text
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

175b249d270a500997cdc25e047a865f

Headers

File Characteristics

Imports

ws2_32

advapi32

kernel32

user32

shlwapi

ole32

oleaut32

Sections

.text Size: 32KB - Virtual size: 32KB

.rdata Size: 4KB - Virtual size: 4KB

.data Size: 5KB - Virtual size: 14KB

.text
Size: 32KB - Virtual size: 32KB

.rdata
Size: 4KB - Virtual size: 4KB

.data
Size: 5KB - Virtual size: 14KB