323a19f5f48acc7c831302a1f26d7c23_JaffaCakes118

General

Target

323a19f5f48acc7c831302a1f26d7c23_JaffaCakes118
Size

36KB
MD5

323a19f5f48acc7c831302a1f26d7c23
SHA1

45754f7cbf26c2f61d6b1b60b39414e01e0a5026
SHA256

a4b6dbc59817d290cb60a8aedc7afa6d6ddd343e43497946967a87da97f4dc9e
SHA512

696f4b11672d1716878acfb91e9a9c361a3d491df6840f3067bfbfd46cd850b30a881486b6fb2c5b09fdb9ddbf200fe07798f87ec6d8ad31f46318d06dbcf17b
SSDEEP

768:UcfZY0Zrc8L4aS+ryFCGK2j8awikPk/mjK90nBL40rcYncgvOUE0FCsrLN3:UgZYSl46ry9KpskPk+ju0nBL40rcYcvO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
323a19f5f48acc7c831302a1f26d7c23_JaffaCakes118

Files

323a19f5f48acc7c831302a1f26d7c23_JaffaCakes118
.dll windows:4 windows x86 arch:x86

9761642a9be64f57ebcedd8623c19696

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

ws2_32

ntohl
getsockname
recvfrom
getpeername
bind
listen
WSAAccept
shutdown
WSAStartup
send
gethostbyname
setsockopt
htons
htonl
sendto
WSASocketA
ioctlsocket
connect
WSAGetLastError
select
__WSAFDIsSet
closesocket
inet_addr
inet_ntoa
recv

user32

wsprintfA

advapi32

RegDeleteValueA
RegNotifyChangeKeyValue
RegEnumValueA
RegCloseKey
RegQueryValueExA
RegCreateKeyA
RegOpenKeyA
RegSetValueExA

wininet

InternetCloseHandle
InternetOpenA
InternetOpenUrlA
InternetReadFile

msvcrt

??2@YAPAXI@Z
_adjust_fdiv
floor
_strnicmp
_strdup
tolower
rand
time
fclose
??3@YAXPAX@Z
fwrite
_initterm
fopen
system
_ftol
strstr
sscanf
atol
fgets
srand
sprintf
realloc
isspace
atoi
strchr
free
malloc

kernel32

CloseHandle
lstrcmpiA
lstrcpyA
CreateProcessA
GetCurrentThread
SetThreadPriority
lstrlenA
WaitForSingleObject
CreateThread
GetFileAttributesA
GetSystemDirectoryA
lstrcatA
GetModuleHandleA
LoadLibraryA
GetProcAddress
GetVersionExA
GetTickCount
LeaveCriticalSection
CreateEventA
CreateMutexA
EnterCriticalSection
InitializeCriticalSection
ExitThread
Sleep

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 103KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9761642a9be64f57ebcedd8623c19696

Headers

File Characteristics

Imports

ws2_32

user32

advapi32

wininet

msvcrt

kernel32

Sections

.text Size: 28KB - Virtual size: 27KB

.data Size: 4KB - Virtual size: 103KB

.reloc Size: 2KB - Virtual size: 2KB

.text
Size: 28KB - Virtual size: 27KB

.data
Size: 4KB - Virtual size: 103KB

.reloc
Size: 2KB - Virtual size: 2KB