36d014a14a8389365d0e1fa18f07a65c_JaffaCakes118

General

Target

36d014a14a8389365d0e1fa18f07a65c_JaffaCakes118
Size

29KB
MD5

36d014a14a8389365d0e1fa18f07a65c
SHA1

07f2fe5ba45af9bfdd12ef99fa1004f563bfc0f0
SHA256

b0636d58c6d5403be9d3121ccb5fac888c84b4a26b96c475aacadf7226cadc43
SHA512

581d0fb518927b7a51fc963cbc96ce27c6867c7790588acd69623cdcc3325b060f53c0d0150bd46ba0a7e7975f46d7089e963303710c8fb101d7d988b0dec657
SSDEEP

384:uLuI1tA71mPyyK7nphToGSxR3ml6N5QQbzqy94SO+E7h6JLKkobU:u6gyVbboGeh5QGHeSJ8h+mkob

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
36d014a14a8389365d0e1fa18f07a65c_JaffaCakes118

Files

36d014a14a8389365d0e1fa18f07a65c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3c20fbd914f2ea4733ddc9702f9b1104

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

getsockname
inet_addr
WSACleanup
recv
select
send
connect
WSAStartup
gethostbyname
htons
socket
sendto
closesocket

user32

CharLowerA

advapi32

RegSetValueExA
RegCloseKey
GetUserNameA
RegCreateKeyExA

shfolder

SHGetFolderPathA

shell32

ShellExecuteA

kernel32

LoadLibraryA
GetProcAddress
GetOEMCP
GetACP
GetCPInfo
SetStdHandle
GetStringTypeA
MultiByteToWideChar
SetFilePointer
WriteFile
RtlUnwind
LCMapStringA
LCMapStringW
FlushFileBuffers
GetStringTypeW
GetLocaleInfoA
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
Sleep
GetTickCount
CreateThread
ReleaseMutex
CreateMutexA
ExitThread
ExitProcess
CopyFileA
SetFileAttributesA
lstrcmpiA
GetModuleFileNameA
GetModuleHandleA
GetLastError
OpenMutexA
SetErrorMode
GetVersionExA
TerminateThread
CloseHandle
WaitForSingleObject
HeapAlloc
GetStartupInfoA
GetCommandLineA
GetVersion
HeapDestroy
HeapCreate
VirtualFree
HeapFree
VirtualAlloc
HeapReAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings

Sections

.text
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

3c20fbd914f2ea4733ddc9702f9b1104

Headers

File Characteristics

Imports

ws2_32

user32

advapi32

shfolder

shell32

kernel32

Sections

.text Size: 22KB - Virtual size: 22KB

.rdata Size: 3KB - Virtual size: 2KB

.data Size: 3KB - Virtual size: 11KB

.text
Size: 22KB - Virtual size: 22KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 3KB - Virtual size: 11KB