285d162bbd1f0750ddd799e3e60bd1ce_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

285d162bbd1f0750ddd799e3e60bd1ce_JaffaCakes118
Size

56KB
MD5

285d162bbd1f0750ddd799e3e60bd1ce
SHA1

adfd695951636fa323002ceab795dcd0064fe908
SHA256

40eed4cab54a91ab7d9b195679d675ec7029cefc12785fc80b75411c335554b4
SHA512

83ce8c4cdfba7d6462cccba049b2d210682705d9785e55f91ee26ac373f49e18234f34b912b065411ef3b4eea72a558b60d915b1d5365bc89c4f04d3570f36ac
SSDEEP

768:UhEqUZwo3DnktE0KsT7Wdx0aPH0gKKzEF/XWyQ8UzX93oBg:UhEzZwobeKsT7W//HKKzw/Xluz1oBg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
285d162bbd1f0750ddd799e3e60bd1ce_JaffaCakes118

Files

285d162bbd1f0750ddd799e3e60bd1ce_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9290ac9cbe0e9a83d6f8b4b2dbd7ea58

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LocalAlloc
ReadFile
WaitForSingleObject
LocalFree
CreatePipe
lstrcpyA
GetModuleFileNameA
GetSystemDirectoryA
GetWindowsDirectoryA
GetLastError
CreateFileA
GetFileTime
FileTimeToLocalFileTime
FileTimeToSystemTime
SystemTimeToFileTime
LocalFileTimeToFileTime
SetFileTime
CloseHandle
CreateDirectoryA
SetFileAttributesA
GetTempPathA
Sleep
CreateProcessA
DeleteFileA
CompareStringW
CompareStringA
SetEndOfFile
LoadLibraryA
GetProcAddress
GetOEMCP
GetACP
GetCPInfo
GetStringTypeW
SetEnvironmentVariableA
GetStringTypeA
FlushFileBuffers
SetStdHandle
RtlUnwind
HeapFree
HeapAlloc
GetTimeZoneInformation
GetSystemTime
GetLocalTime
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
WriteFile
WideCharToMultiByte
MultiByteToWideChar
LCMapStringA
LCMapStringW
TerminateProcess
GetCurrentProcess
SetFilePointer
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType

advapi32

CreateServiceA
StartServiceCtrlDispatcherA
RegisterServiceCtrlHandlerA
SetServiceStatus
OpenServiceA
ControlService
QueryServiceStatus
QueryServiceConfigA
DeleteService
CloseServiceHandle
RegCreateKeyExA
RegSetValueExA
RegOpenKeyExA
RegCloseKey
RegQueryValueExA
OpenSCManagerA

shell32

ShellExecuteA

ws2_32

htons
connect
socket
recv
closesocket
WSAStartup
WSACleanup
send
inet_addr

rasapi32

RasEnumConnectionsA

Sections

.text
Size: 36KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 824B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9290ac9cbe0e9a83d6f8b4b2dbd7ea58

Headers

File Characteristics

Imports

kernel32

advapi32

shell32

ws2_32

rasapi32

Sections

.text Size: 36KB - Virtual size: 33KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 8KB - Virtual size: 13KB

.rsrc Size: 4KB - Virtual size: 824B

.text
Size: 36KB - Virtual size: 33KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 8KB - Virtual size: 13KB

.rsrc
Size: 4KB - Virtual size: 824B