3c733f65d8e5d4e35d2b4c8ddb76660d_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

3c733f65d8e5d4e35d2b4c8ddb76660d_JaffaCakes118
Size

179KB
MD5

3c733f65d8e5d4e35d2b4c8ddb76660d
SHA1

9b2ddd16ea47b1bf68483bee879131ed90e0e2a1
SHA256

b4fbddb3420a4ed80838085b68e649857f64bb7d28e7c0be52ef7fb723631f22
SHA512

90e85faaaaf61dd982fcc703c963f6d42ba072da6ce3be6ae01b6475c2fbc8301912ac105d0882355f731472c7b7f31ffb37ffb395996cd04710960c9fa2f833
SSDEEP

3072:baQXvdbjQ74+uhZA5GN9UTBkxogSQpa8KNma2VhcwF/6DnxwHhI4wyvlbTL5Gj3I:baQXRQqZeG3UEogSQpa8KNmFui/6DGEM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3c733f65d8e5d4e35d2b4c8ddb76660d_JaffaCakes118

Files

3c733f65d8e5d4e35d2b4c8ddb76660d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

260e5231dece85347f912b41f58d90f3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

WSACleanup
WSAStartup
setsockopt
ioctlsocket
htons
bind
listen
select
__WSAFDIsSet
accept
recv
socket
connect
closesocket
send
inet_addr

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

kernel32

GetCurrentProcess
SetEnvironmentVariableA
CompareStringW
CompareStringA
SetEndOfFile
FlushFileBuffers
SetStdHandle
GetStringTypeW
GetStringTypeA
RtlUnwind
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
LCMapStringW
LCMapStringA
GetOEMCP
GetACP
WriteFile
WaitForSingleObject
GetLastError
CreateEventA
ReadFile
CloseHandle
CreateFileA
Sleep
ExitThread
DeleteFileA
CreateProcessA
OpenProcess
GetCurrentProcessId
CopyFileA
SetFileAttributesA
GetFileAttributesA
GetModuleFileNameA
GetModuleHandleA
GetSystemDirectoryA
ExitProcess
CreateMutexA
GetTickCount
MoveFileA
GetTempPathA
CreateThread
SetFilePointer
GetFileSize
GetLocalTime
FormatMessageA
GlobalUnlock
GlobalLock
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
SetFileTime
GetFileTime
ExpandEnvironmentStringsA
GetExitCodeProcess
PeekNamedPipe
DuplicateHandle
CreatePipe
WideCharToMultiByte
MultiByteToWideChar
GetComputerNameA
GetTimeFormatA
GetDateFormatA
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
FindNextFileA
FindFirstFileA
TerminateProcess
GetLogicalDrives
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
LoadLibraryA
GetProcAddress
GetLocaleInfoA
GetVersionExA
GlobalMemoryStatus
TerminateThread
HeapFree
HeapAlloc
GetTimeZoneInformation
GetSystemTime
HeapReAlloc
GetStartupInfoA
GetCommandLineA
GetVersion
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
RaiseException
GetCPInfo

Sections

.text
Size: 130KB - Virtual size: 130KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 41KB - Virtual size: 352KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

260e5231dece85347f912b41f58d90f3

Headers

File Characteristics

Imports

ws2_32

version

kernel32

Sections

.text Size: 130KB - Virtual size: 130KB

.rdata Size: 6KB - Virtual size: 5KB

.data Size: 41KB - Virtual size: 352KB

.text
Size: 130KB - Virtual size: 130KB

.rdata
Size: 6KB - Virtual size: 5KB

.data
Size: 41KB - Virtual size: 352KB