3204b4dcb4b7cb647eca2f1c2afc5a2c_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

3204b4dcb4b7cb647eca2f1c2afc5a2c_JaffaCakes118
Size

252KB
MD5

3204b4dcb4b7cb647eca2f1c2afc5a2c
SHA1

d838648b5237043b7aa17998d32480cb1e50b071
SHA256

698ce95bd4b95d35784c0bd1e634b70a9c7944e4e4906deaa19479243823618a
SHA512

6211e4c183d3e02427180aff753fc4dc48e1fcfa91685249d82ad4baad5be49d89bf38b030748977ed7387c8ecf2a9a2c912c090ca37519f21614365d6687bfc
SSDEEP

6144:Fg9SJ3GmB+gw8quOMdwD5xTse7P+BMbA5QwEgNV0gShqlHfl:YSJWmMB6OM6VxAeD+qbA5LEgNKhCHfl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3204b4dcb4b7cb647eca2f1c2afc5a2c_JaffaCakes118

Files

3204b4dcb4b7cb647eca2f1c2afc5a2c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d9e532bee60319c34dd4f051b70ae406

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

htons
inet_addr
gethostname
gethostbyname

iphlpapi

GetBestInterface
GetIpAddrTable

kernel32

GetProcessHeap
TlsAlloc
InitializeCriticalSection
WaitForSingleObject
lstrcpyW
lstrlenW
GetLastError
CreateEventW
CreateMutexW
GetCurrentProcessId
FreeLibrary
GlobalAlloc
LoadLibraryW
ExpandEnvironmentStringsW
SetEvent
GetModuleHandleW
GetVersionExW
GetModuleFileNameW
ExitProcess
GetCurrentProcess
SetUnhandledExceptionFilter
IsDebuggerPresent
RaiseException
GetCurrentThreadId
FatalAppExitA
HeapCreate
Sleep
GetFileAttributesW
GetModuleFileNameA
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetCurrentThread
GetModuleHandleA
GetStartupInfoA
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
LoadLibraryA
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
GetLocaleInfoA
IsValidLocale
GetLocaleInfoW
GetVersion
GetProcAddress

advapi32

SetSecurityDescriptorDacl
InitializeSecurityDescriptor

netapi32

NetReplGetInfo
NetUseGetInfo

user32

CharNextA
GetMenuStringA
SetWindowTextA
WaitMessage
CreateDialogParamA
DialogBoxIndirectParamW
GetCapture
CreatePopupMenu
LoadBitmapA
CharNextW
SetFocus
SendMessageW
GetActiveWindow
CharLowerA
CreateWindowExW
InsertMenuItemA
GetKeyboardLayout
IsMenu
SetCursor
GetMenuItemInfoA
RegisterWindowMessageA
CharUpperW
LoadMenuA
SetCapture
CopyIcon
LoadMenuIndirectA
EmptyClipboard
SetDlgItemInt
CreateWindowExA
SetForegroundWindow
ShowWindow
DefWindowProcW
GetMenu
GetWindowRgn
TrackPopupMenu
PostQuitMessage
GetCursorPos

gdi32

GetStockObject
RemoveFontResourceW
CreateBitmap
DeleteObject
CreateFontW
CreateDIBPatternBrushPt
CreateScalableFontResourceW

Sections

.edata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.aaIrfj
Size: 104KB - Virtual size: 187KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 102KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.E
Size: 110KB - Virtual size: 124KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d9e532bee60319c34dd4f051b70ae406

Headers

File Characteristics

Imports

ws2_32

iphlpapi

kernel32

advapi32

netapi32

user32

gdi32

Sections

.edata Size: 6KB - Virtual size: 5KB

.rdata Size: 12KB - Virtual size: 12KB

.rdata Size: 3KB - Virtual size: 12KB

.aaIrfj Size: 104KB - Virtual size: 187KB

.data Size: 6KB - Virtual size: 102KB

.E Size: 110KB - Virtual size: 124KB

.rsrc Size: 9KB - Virtual size: 8KB

.edata
Size: 6KB - Virtual size: 5KB

.rdata
Size: 12KB - Virtual size: 12KB

.rdata
Size: 3KB - Virtual size: 12KB

.aaIrfj
Size: 104KB - Virtual size: 187KB

.data
Size: 6KB - Virtual size: 102KB

.E
Size: 110KB - Virtual size: 124KB

.rsrc
Size: 9KB - Virtual size: 8KB