2c448682df731752455d62464671737a_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

2c448682df731752455d62464671737a_JaffaCakes118
Size

252KB
MD5

2c448682df731752455d62464671737a
SHA1

49a23d26b7b688c8fc8e82e4a48c036d43c099e2
SHA256

d3a9a1438feed76d5974c32f0c5ae442978608c300151bb84ab1a78897aa1a34
SHA512

259516d725e3120d64bf450b497f4506a8eaf184844f6e0bb966ea270f5c2e392ddda81a46cb2a8e599faeae136553d1f165cd2afffad50fe1e9b31b3271d7bd
SSDEEP

6144:vg9SJ3GmB+gw8quOMdwD5xTse7P+BMbA5QwEgNV0gShqlHfl:SSJWmMB6OM6VxAeD+qbA5LEgNKhCHfl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2c448682df731752455d62464671737a_JaffaCakes118

Files

2c448682df731752455d62464671737a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d9e532bee60319c34dd4f051b70ae406

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

htons
inet_addr
gethostname
gethostbyname

iphlpapi

GetBestInterface
GetIpAddrTable

kernel32

GetProcessHeap
TlsAlloc
InitializeCriticalSection
WaitForSingleObject
lstrcpyW
lstrlenW
GetLastError
CreateEventW
CreateMutexW
GetCurrentProcessId
FreeLibrary
GlobalAlloc
LoadLibraryW
ExpandEnvironmentStringsW
SetEvent
GetModuleHandleW
GetVersionExW
GetModuleFileNameW
ExitProcess
GetCurrentProcess
SetUnhandledExceptionFilter
IsDebuggerPresent
RaiseException
GetCurrentThreadId
FatalAppExitA
HeapCreate
Sleep
GetFileAttributesW
GetModuleFileNameA
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetCurrentThread
GetModuleHandleA
GetStartupInfoA
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
LoadLibraryA
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
GetLocaleInfoA
IsValidLocale
GetLocaleInfoW
GetVersion
GetProcAddress

advapi32

SetSecurityDescriptorDacl
InitializeSecurityDescriptor

netapi32

NetReplGetInfo
NetUseGetInfo

user32

CharNextA
GetMenuStringA
SetWindowTextA
WaitMessage
CreateDialogParamA
DialogBoxIndirectParamW
GetCapture
CreatePopupMenu
LoadBitmapA
CharNextW
SetFocus
SendMessageW
GetActiveWindow
CharLowerA
CreateWindowExW
InsertMenuItemA
GetKeyboardLayout
IsMenu
SetCursor
GetMenuItemInfoA
RegisterWindowMessageA
CharUpperW
LoadMenuA
SetCapture
CopyIcon
LoadMenuIndirectA
EmptyClipboard
SetDlgItemInt
CreateWindowExA
SetForegroundWindow
ShowWindow
DefWindowProcW
GetMenu
GetWindowRgn
TrackPopupMenu
PostQuitMessage
GetCursorPos

gdi32

GetStockObject
RemoveFontResourceW
CreateBitmap
DeleteObject
CreateFontW
CreateDIBPatternBrushPt
CreateScalableFontResourceW

Sections

.edata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.aaIrfj
Size: 104KB - Virtual size: 187KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 102KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.E
Size: 110KB - Virtual size: 124KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d9e532bee60319c34dd4f051b70ae406

Headers

File Characteristics

Imports

ws2_32

iphlpapi

kernel32

advapi32

netapi32

user32

gdi32

Sections

.edata Size: 6KB - Virtual size: 5KB

.rdata Size: 12KB - Virtual size: 12KB

.rdata Size: 3KB - Virtual size: 12KB

.aaIrfj Size: 104KB - Virtual size: 187KB

.data Size: 6KB - Virtual size: 102KB

.E Size: 110KB - Virtual size: 124KB

.rsrc Size: 9KB - Virtual size: 8KB

.edata
Size: 6KB - Virtual size: 5KB

.rdata
Size: 12KB - Virtual size: 12KB

.rdata
Size: 3KB - Virtual size: 12KB

.aaIrfj
Size: 104KB - Virtual size: 187KB

.data
Size: 6KB - Virtual size: 102KB

.E
Size: 110KB - Virtual size: 124KB

.rsrc
Size: 9KB - Virtual size: 8KB