2484c9fdd2a9402bad08a5e27c78a8a4_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

2484c9fdd2a9402bad08a5e27c78a8a4_JaffaCakes118
Size

2.7MB
MD5

2484c9fdd2a9402bad08a5e27c78a8a4
SHA1

906a70f2d8e91e0ac33f475dcb5a1fe30e34520c
SHA256

2a1d73d981a85f0bac9b7f52ba35425a781a7fa71f091edf313648552e4532b7
SHA512

70634ef223b77d2e4fe76271e1ed88e6e3ba64e3ecf5e39f6b51430b02e866ae88d368e154b63432535a3dac5a3bbf299ace80565150072e2c98a61e8d3bf763
SSDEEP

49152:wPqLH7TW9u9uz+jFJqkQSMbTd85q/FUVdUAe88X:eAbpxJWnTdy3c88X

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2484c9fdd2a9402bad08a5e27c78a8a4_JaffaCakes118

Files

2484c9fdd2a9402bad08a5e27c78a8a4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0727f5da12cd50ba3a482141c94c576a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

WSACloseEvent
WSAConnect
WSAAddressToStringA
WSACreateEvent
WSAWaitForMultipleEvents
WSAEnumNetworkEvents

userenv

EnterCriticalPolicySection
UnloadUserProfile
DeleteProfileA
CreateEnvironmentBlock
DestroyEnvironmentBlock

winmm

waveInClose
timeBeginPeriod
timeEndPeriod
waveInAddBuffer
waveInOpen
waveInStop
waveInStart

mpr

WNetAddConnection2A
WNetGetUniversalNameA
WNetGetUserA

netapi32

NetWkstaGetInfo
NetApiBufferFree
NetGetAnyDCName

comdlg32

GetFileTitleA
ChooseFontA
CommDlgExtendedError
GetSaveFileNameA
GetOpenFileNameA
ChooseColorA

comctl32

ImageList_Remove
ImageList_SetBkColor
ImageList_SetDragCursorImage
ImageList_SetIconSize
ImageList_Write
ImageList_AddMasked
ImageList_GetImageCount
ImageList_Destroy

kernel32

GetACP
GetCPInfo
WriteFile
RtlUnwind
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetModuleFileNameA
GetOEMCP
IsBadWritePtr
HeapReAlloc
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetVersion
GetCommandLineA
GetStartupInfoA
GetModuleHandleA
HeapAlloc
HeapFree
GetCurrentProcess
GetProcAddress
LoadLibraryA
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
UnhandledExceptionFilter
SetSystemPowerState
GetProcessHeap
GetLocalTime
CreateFileA
WriteConsoleW
VirtualProtect
GetEnvironmentVariableA
lstrcmpiA
ExitProcess
TerminateProcess

Sections

.text
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 236KB - Virtual size: 236KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 548KB - Virtual size: 2.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0727f5da12cd50ba3a482141c94c576a

Headers

DLL Characteristics

File Characteristics

Imports

ws2_32

userenv

winmm

mpr

netapi32

comdlg32

comctl32

kernel32

Sections

.text Size: 36KB - Virtual size: 36KB

.rdata Size: 236KB - Virtual size: 236KB

.data Size: 548KB - Virtual size: 2.2MB

.idata Size: 4KB - Virtual size: 4KB

.tls Size: 4KB - Virtual size: 4KB

.rsrc Size: 32KB - Virtual size: 31KB

.text
Size: 36KB - Virtual size: 36KB

.rdata
Size: 236KB - Virtual size: 236KB

.data
Size: 548KB - Virtual size: 2.2MB

.idata
Size: 4KB - Virtual size: 4KB

.tls
Size: 4KB - Virtual size: 4KB

.rsrc
Size: 32KB - Virtual size: 31KB