2a71c4d11a552475b4fcad263d43f7c1_JaffaCakes118

General

Target

2a71c4d11a552475b4fcad263d43f7c1_JaffaCakes118
Size

39KB
MD5

2a71c4d11a552475b4fcad263d43f7c1
SHA1

a56a9376d9e1d027db4f3b30c0c3336cba2cc418
SHA256

1e850c1ba779f10166d9db7939f00d3b547d51c4b7eba598a61588aee04365d4
SHA512

f76ad6378751bd8fcd3a9e0e397f6d7e38c9882a8587b5d5613e29d9c5adfc9264e6dc85b814b81bb54412419623b683f20ff162eff0f1d90aededc55bd86d1b
SSDEEP

768:iEFUSDqd5RqDO+hC4M3yw3KxezNIuXY4BcRKNZ2o:iEan0O+hCVX4ezN5Y4Bek2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2a71c4d11a552475b4fcad263d43f7c1_JaffaCakes118

Files

2a71c4d11a552475b4fcad263d43f7c1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

54b6cea814f1988ce0b48e7623f5f926

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CopyFileA
GetLogicalDriveStringsA
GetSystemDirectoryA
lstrcatA
WaitForSingleObject
CreateMutexA
GetProcAddress
LoadLibraryA
GetVersionExA
FreeResource
WriteFile
CreateFileA
LockResource
LoadResource
SizeofResource
FindResourceA
SetFileAttributesA
FreeLibrary
GlobalFree
LoadLibraryExA
GlobalAlloc
GetModuleHandleA
ResumeThread
CreateProcessA
SetThreadPriority
GetCurrentThread
SetPriorityClass
GetCurrentProcess
GetEnvironmentVariableA
GetShortPathNameA
GetModuleFileNameA
lstrlenA
GetLastError
GetTickCount
lstrcmpiA
GetTempPathA
DeleteFileA
GlobalMemoryStatus
CreateThread
ExitThread
ExitProcess
WinExec
lstrcpyA
GetDriveTypeA
Sleep
CloseHandle
TerminateThread
DeviceIoControl
GetStartupInfoA

comdlg32

GetFileTitleA

advapi32

RegQueryValueExA
StartServiceCtrlDispatcherA
CreateServiceA
StartServiceA
RegisterServiceCtrlHandlerA
SetServiceStatus
CloseServiceHandle
ControlService
RegOpenKeyExA
RegCloseKey
OpenSCManagerA
OpenServiceA
DeleteService
RegOpenKeyA
RegSetValueExA

msvcrt

printf
strstr
sprintf
fclose
fread
fopen
atoi
exit
strncmp
_except_handler3
_exit
_XcptFilter
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp

ws2_32

WSAStartup
send
sendto
socket
htons
gethostbyname
inet_addr
WSACleanup
WSAGetLastError
recv
connect
setsockopt
inet_ntoa
WSASocketA
htonl
closesocket

wininet

DeleteUrlCacheEntry

Sections

.data
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

54b6cea814f1988ce0b48e7623f5f926

Headers

File Characteristics

Imports

kernel32

comdlg32

advapi32

msvcrt

ws2_32

wininet

Sections

.data Size: 23KB - Virtual size: 23KB

.rsrc Size: 15KB - Virtual size: 14KB

.data
Size: 23KB - Virtual size: 23KB

.rsrc
Size: 15KB - Virtual size: 14KB