25035c10117212e34dce88520357b26d_JaffaCakes118

General

Target

25035c10117212e34dce88520357b26d_JaffaCakes118
Size

322KB
MD5

25035c10117212e34dce88520357b26d
SHA1

2fcbba5ccac4f2a6d41009d23b14585d5e4250d1
SHA256

762236ec5ddd14ffc2efca9621dfe30a6d9917f8566b50d56a7f695aed3c29fe
SHA512

6d29f5add4215f7fdbe535bb22889d15587e7d6512f02acc0c787a679a4a7c3cf8eb1af1ed6612cb7e8c6ddb5bd418925b3f75dc06ad64f897ca4912971723d1
SSDEEP

6144:o/m+GMeVi8bNum9PbH/CTeMZOCYTKu//ixeAAJnQT/OYzrsekBb5ycd:oOceV7uabfCtZOh/ix/mQT/5rsekBbwa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
25035c10117212e34dce88520357b26d_JaffaCakes118

Files

25035c10117212e34dce88520357b26d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

09ac197dd0ff12f9b77aeac8b18f6c7c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

closesocket
accept
ntohs

msvcrt

_controlfp
__set_app_type
??3@YAXPAX@Z
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
free
_except_handler3
strcmp
rand
strlen
atoi
memcpy
memset
strcpy
strtok
??2@YAPAXI@Z
strcat
getenv

kernel32

GetStartupInfoA
ReadConsoleA
WriteConsoleA
CloseHandle
AllocConsole
VerLanguageNameA
lstrcmpiA
GetCurrentProcess
GetModuleHandleA
ReadProcessMemory
Sleep
GetModuleFileNameW
lstrlenW
WriteProcessMemory
GetCommandLineA
OutputDebugStringA
LoadLibraryA
GetProcAddress
GetModuleFileNameA
lstrcpyA
GetLastError
lstrcmpA
lstrcatA
CreateThread
WaitForSingleObject
lstrlenA
ExitProcess
CreateMutexA

user32

UpdateWindow
DestroyIcon
CreateMenu
MessageBoxW
MessageBoxA
GetParent

gdi32

GetFontData
StretchBlt
BitBlt
CreateDIBitmap
SelectPalette
PolyTextOutA

comdlg32

ChooseFontA
PrintDlgA

ole32

CoCreateInstance

Sections

.text
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 43KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 260KB - Virtual size: 260KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

09ac197dd0ff12f9b77aeac8b18f6c7c

Headers

File Characteristics

Imports

ws2_32

msvcrt

kernel32

user32

gdi32

comdlg32

ole32

Sections

.text Size: 15KB - Virtual size: 15KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 43KB - Virtual size: 46KB

.rsrc Size: 260KB - Virtual size: 260KB

.text
Size: 15KB - Virtual size: 15KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 43KB - Virtual size: 46KB

.rsrc
Size: 260KB - Virtual size: 260KB