3b62fcac15247f46ca3bcafac17238c8_JaffaCakes118

General

Target

3b62fcac15247f46ca3bcafac17238c8_JaffaCakes118
Size

45KB
MD5

3b62fcac15247f46ca3bcafac17238c8
SHA1

5fc52ef320d9fbc4220e90245059fa4caebfc425
SHA256

e94dc8355f1f107612e4fcc527785ad7980bee0f9d557c5e62e9620b54948d6e
SHA512

d5ca904bb0276acdfb33c9a0f54a0184e793779979eb5eb4a109c803a170c5e8cd9e3a2a0f6ea792df95b9cba7a6ad835475273de734daf9a36fb52f8133b3b0
SSDEEP

768:DI3wl6r8KeSOmmLwA0ZJi72OJnvLZ7oNutcPtT:DIAaMgXc72GvL1oJtT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3b62fcac15247f46ca3bcafac17238c8_JaffaCakes118

Files

3b62fcac15247f46ca3bcafac17238c8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8e2aaf9375c9e85cef070139c7c8f93f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTickCount
ResumeThread
CreateProcessA
SetThreadPriority
GetCurrentThread
SetPriorityClass
GetCurrentProcess
lstrcatA
lstrcpyA
GetEnvironmentVariableA
GetShortPathNameA
GetModuleFileNameA
CloseHandle
WaitForSingleObject
CreateThread
ExitProcess
GetLastError
CreateMutexA
Sleep
lstrlenA
CopyFileA
GetSystemDirectoryA
GlobalMemoryStatusEx
GetComputerNameA
DeleteFileA
LCMapStringA
SetEndOfFile
GetOEMCP
GetACP
GetCPInfo
CreateFileA
FlushFileBuffers
SetStdHandle
HeapReAlloc
GetStringTypeW
GetStringTypeA
MultiByteToWideChar
HeapAlloc
WriteFile
VirtualFree
GetProcAddress
FreeLibrary
LocalAlloc
InterlockedExchange
RaiseException
LoadLibraryA
VirtualQueryEx
ReadProcessMemory
GetThreadContext
TerminateProcess
SetThreadContext
WriteProcessMemory
GetModuleHandleA
VirtualProtectEx
VirtualAllocEx
VirtualAlloc
RtlUnwind
GetStartupInfoA
GetCommandLineA
GetVersion
HeapFree
ReadFile
SetFilePointer
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetVersionExA
HeapDestroy
HeapCreate
LCMapStringW

ws2_32

gethostbyname
gethostname
inet_ntoa
WSAStartup
send
select
recv
__WSAFDIsSet
htons
socket
connect
closesocket
inet_addr

urlmon

URLDownloadToFileA

Sections

.text
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

8e2aaf9375c9e85cef070139c7c8f93f

Headers

File Characteristics

Imports

kernel32

ws2_32

urlmon

Sections

.text Size: 28KB - Virtual size: 28KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 11KB - Virtual size: 16KB

.text
Size: 28KB - Virtual size: 28KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 11KB - Virtual size: 16KB