2c07f1ff38bd0f1e9b9e92c79823ee66_JaffaCakes118

General

Target

2c07f1ff38bd0f1e9b9e92c79823ee66_JaffaCakes118
Size

2.0MB
MD5

2c07f1ff38bd0f1e9b9e92c79823ee66
SHA1

03135a3164516df76c68c3d2fb40f33057923d42
SHA256

95fa8426d730837afc26aa7ca6fbc6ab5bcba484d37dffa22e8d0718805d7ec6
SHA512

cbf6b9e09d813c27845fd0d186ad065c8aa4fd20c6f5da5a9b62b47ff7607f3290056fe28a055e58b403d802290230b556db4a362dc551ef10b9f707fd5f0fb6
SSDEEP

24576:Ag6119vpVU7wiCyuIYTKcCLYESr9QCKkd3oCctVr+JK1mLD5+ZjePeVUUZOYvB0f:Ag6HVjyii8E4ld3oC8+hXBPYb7HzVu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2c07f1ff38bd0f1e9b9e92c79823ee66_JaffaCakes118

Files

2c07f1ff38bd0f1e9b9e92c79823ee66_JaffaCakes118
.exe windows:4 windows x86 arch:x86

19747623e6ab86cffa0fb0ad3e09e2ef

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

select
WSAInstallServiceClassW
sendto
WSASendDisconnect
WSASocketW
ioctlsocket
gethostbyaddr
inet_addr

oleaut32

SysFreeString
SafeArrayRedim

kernel32

ExitThread
GetConsoleMode
GetShortPathNameW
IsBadStringPtrA
CreateIoCompletionPort
GetTempPathW
GetDiskFreeSpaceExA
CreateProcessA
GetCurrentProcessId
ExitProcess
GetThreadContext
SetupComm
OpenMutexA
SwitchToFiber
VirtualAllocEx

user32

GetTopWindow
LoadStringA
CreateIconFromResource
GetMessageA
EnumDisplayDevicesA
AppendMenuA
mouse_event
GetWindowContextHelpId
SendNotifyMessageA
PeekMessageW
CreateDialogIndirectParamA
SetCaretPos
GetIconInfo
GetTabbedTextExtentA
ExcludeUpdateRgn
SetThreadDesktop
IsDialogMessageW
GetMonitorInfoA

advapi32

AccessCheckAndAuditAlarmW
AllocateLocallyUniqueId
SetKernelObjectSecurity
EqualSid
IsValidAcl
BuildTrusteeWithSidW
SetSecurityDescriptorDacl
AddAce
ChangeServiceConfigW
StartServiceW
GetAclInformation
ObjectCloseAuditAlarmA
RegQueryValueA
SetSecurityDescriptorGroup
RegFlushKey
GetPrivateObjectSecurity
UnlockServiceDatabase

comctl32

ImageList_GetBkColor
ImageList_SetImageCount

Sections

.text
Size: 3KB - Virtual size: 251KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1.8MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

19747623e6ab86cffa0fb0ad3e09e2ef

Headers

File Characteristics

Imports

ws2_32

oleaut32

kernel32

user32

advapi32

comctl32

Sections

.text Size: 3KB - Virtual size: 251KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 1.8MB - Virtual size: 1.8MB

.rsrc Size: 17KB - Virtual size: 16KB

.text
Size: 3KB - Virtual size: 251KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 1.8MB - Virtual size: 1.8MB

.rsrc
Size: 17KB - Virtual size: 16KB