2de689aa92da25dd2464230e8da1957e_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

2de689aa92da25dd2464230e8da1957e_JaffaCakes118
Size

60KB
MD5

2de689aa92da25dd2464230e8da1957e
SHA1

6e24aa21ed674176053901a279448e475fb523aa
SHA256

91147a66af8bbe6a8f17eb63856857ca6c6dff628e010d3d2fd8587109dc34f9
SHA512

9fdace763ecea398571cfb0b78c0c1ce98173cf96df62bef18ce3333e7bf46fad7f8691d0d7d9d9913a50202c8ac38099f4d2f6fd55402bc7af236abf153f4f6
SSDEEP

768:pKSStAJMIdQOQCH3N+79r4gWazu+crBLi3hNrLFaBj2ojlhYb:fStAJ9QOQCH3N+7c9rBLi3h9pojlhYb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2de689aa92da25dd2464230e8da1957e_JaffaCakes118

Files

2de689aa92da25dd2464230e8da1957e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e5c21e28add973093779e2af241beac8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

inet_ntoa
inet_addr
connect
htons
socket
bind
listen
ioctlsocket
select
__WSAFDIsSet
accept
WSAGetLastError
send
closesocket
WSAStartup
recv
getsockname
gethostbyaddr
gethostbyname

shell32

ShellExecuteA

advapi32

RegDeleteValueA
RegOpenKeyExA
RegSetValueExA
RegCloseKey
RegisterServiceCtrlHandlerA
SetServiceStatus
GetUserNameA
StartServiceCtrlDispatcherA
OpenSCManagerA
OpenServiceA
CreateServiceA
StartServiceA
RegOpenKeyA

wininet

InternetReadFile
InternetCloseHandle
InternetOpenUrlA
InternetOpenA

kernel32

GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
GetEnvironmentStringsW
UnhandledExceptionFilter
GetOEMCP
GetACP
GetCPInfo
SetHandleCount
GetStdHandle
GetFileType
RtlUnwind
GetLastError
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
SetStdHandle
FlushFileBuffers
FreeEnvironmentStringsA
GetFileAttributesA
HeapReAlloc
VirtualAlloc
HeapFree
VirtualFree
GetSystemDirectoryA
SetErrorMode
CreateMutexA
Sleep
GetComputerNameA
GetTickCount
GetVersionExA
GlobalMemoryStatus
CloseHandle
Process32Next
Process32First
CreateToolhelp32Snapshot
TerminateThread
CreateThread
GetFileSize
CreateFileA
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
FindNextFileA
FindFirstFileA
ReadFile
SetFilePointer
ExitThread
GetTimeFormatA
GetDateFormatA
WriteFile
GetTempPathA
DeleteFileA
CopyFileA
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
LoadLibraryA
TerminateProcess
OpenProcess
VirtualProtect
HeapAlloc
ExitProcess
GetCurrentProcess
GetStartupInfoA
GetCommandLineA
GetVersion
HeapDestroy
HeapCreate

Sections

.text
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 114KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

e5c21e28add973093779e2af241beac8

Headers

File Characteristics

Imports

ws2_32

shell32

advapi32

wininet

kernel32

Sections

.text Size: 40KB - Virtual size: 39KB

.rdata Size: 8KB - Virtual size: 6KB

.data Size: 8KB - Virtual size: 114KB

.text
Size: 40KB - Virtual size: 39KB

.rdata
Size: 8KB - Virtual size: 6KB

.data
Size: 8KB - Virtual size: 114KB