391149ba18fbe85312fc80a4fe9e3ab5_JaffaCakes118

General

Target

391149ba18fbe85312fc80a4fe9e3ab5_JaffaCakes118
Size

39KB
MD5

391149ba18fbe85312fc80a4fe9e3ab5
SHA1

34f8cf9e37ff9d60b1fb3ee7d519884ae16dfecd
SHA256

d6dd0c1702c2e192a70d210f36779422193513cd262c0961acf6ce7428da4490
SHA512

683d872e0bdfe8c961a10a7b07132d0e16b10ea448e64b2e9be3eb5a172ecb0034d9d33bd9f4b02cadb9404553947272673b285c0093e6bcb2304196c9484a2b
SSDEEP

768:fr3JFE9QBziCDe7gOHN49RbsZ+Ji5o4a:VFDje7gOHKgo4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
391149ba18fbe85312fc80a4fe9e3ab5_JaffaCakes118

Files

391149ba18fbe85312fc80a4fe9e3ab5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6b3f6bf72c0a766d45a7b3bc1323306f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

WSAStartup
closesocket
inet_addr
gethostbyname
WSACleanup
recv
select
send
htons
socket
connect

shell32

ShellExecuteA

advapi32

RegSetValueExA
RegCloseKey
RegCreateKeyExA

kernel32

LCMapStringA
MultiByteToWideChar
SetStdHandle
LoadLibraryA
GetProcAddress
LCMapStringW
GetACP
GetCPInfo
SetFilePointer
GetEnvironmentStringsW
GetEnvironmentStrings
GetStringTypeA
GetStringTypeW
GetOEMCP
FlushFileBuffers
CloseHandle
CreateProcessA
ExpandEnvironmentStringsA
GetModuleFileNameA
GetModuleHandleA
ExitProcess
GetLastError
CreateMutexA
Sleep
SetErrorMode
CopyFileA
SetFileAttributesA
GetFileAttributesA
lstrcmpiA
GetTempPathA
GetTickCount
ExitThread
GetLocaleInfoA
WriteFile
RtlUnwind
WideCharToMultiByte
FreeEnvironmentStringsW
GetFileType
GetStdHandle
HeapAlloc
GetStartupInfoA
GetCommandLineA
GetVersion
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
VirtualAlloc
HeapReAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
SetHandleCount

user32

wsprintfA

shlwapi

PathRemoveFileSpecA

urlmon

URLDownloadToFileA

Sections

.text
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

6b3f6bf72c0a766d45a7b3bc1323306f

Headers

File Characteristics

Imports

ws2_32

shell32

advapi32

kernel32

user32

shlwapi

urlmon

Sections

.text Size: 24KB - Virtual size: 23KB

.rdata Size: 3KB - Virtual size: 2KB

.data Size: 11KB - Virtual size: 20KB

.text
Size: 24KB - Virtual size: 23KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 11KB - Virtual size: 20KB