38b5693e6aab11ec00deef1855766854_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

38b5693e6aab11ec00deef1855766854_JaffaCakes118
Size

15KB
MD5

38b5693e6aab11ec00deef1855766854
SHA1

3dbfca99a95979b07bb0a4ebbedc3c297da974c6
SHA256

b0e6f3522cbfec11db157c0206783a1f081d11b0a80f5a3f8528c813a8cbc08e
SHA512

db5150bd978abe580053a6dfe326873a4830aeb892b2851055ad03a7b411da297d7adf440aef4a79711fcdd49d37b06c5d12df0320e464f7610806aa5a5c675e
SSDEEP

192:mmov5N3jlp3z7dNp0G/gEFMdfoQ9wX9sgEuqkYD97N67utvzKOnWJo08/XxSDIbh:GDjlpJzgEFGKtsgE/R/XwDI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
38b5693e6aab11ec00deef1855766854_JaffaCakes118

Files

38b5693e6aab11ec00deef1855766854_JaffaCakes118
.dll windows:4 windows x86 arch:x86

88cfdf111d75d5ab39bcc48f7d4fc2dc

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

ws2_32

WSAStartup
gethostbyname
socket
htons
connect
send
recv
closesocket
WSACleanup

msvcp60

?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDABV?$allocator@D@1@@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
??9std@@YA_NPBDABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
?resize@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z
?_Freeze@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ID@Z
??9std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z

msvcrt

strcat
memcpy
strlen
sprintf
strcpy
atoi
fwrite
fputc
__dllonexit
_onexit
free
_initterm
malloc
_adjust_fdiv
fopen
_strrev
fscanf
strstr
fclose
__CxxFrameHandler
memset

kernel32

lstrcatA
GetFileAttributesA
GetVersionExA
GetCurrentProcess
CloseHandle
GetCurrentDirectoryA
Sleep
ExitThread
GetSystemDirectoryA
LoadLibraryA
ExitProcess
FreeLibrary
DisableThreadLibraryCalls
CreateThread
GetProcAddress

Exports

Exports

KsCreateAllocator
KsCreateClock
KsCreatePin
KsCreateTopologyNode

Sections

.mpress
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 244B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

88cfdf111d75d5ab39bcc48f7d4fc2dc

Headers

File Characteristics

Imports

ws2_32

msvcp60

msvcrt

kernel32

Exports

Exports

Sections

.mpress Size: 6KB - Virtual size: 5KB

.bss Size: - Virtual size: 244B

.data Size: 6KB - Virtual size: 6KB

.reloc Size: 1KB - Virtual size: 1KB

.mpress
Size: 6KB - Virtual size: 5KB

.bss
Size: - Virtual size: 244B

.data
Size: 6KB - Virtual size: 6KB

.reloc
Size: 1KB - Virtual size: 1KB