3d5ca5bf17909e0e028cabacec4a3dbf_JaffaCakes118

General

Target

3d5ca5bf17909e0e028cabacec4a3dbf_JaffaCakes118
Size

28KB
MD5

3d5ca5bf17909e0e028cabacec4a3dbf
SHA1

c6f6c099c740eeb29bd3eddaa5b7181158c4cd2d
SHA256

b5d0ee60015a66777580b571ae30d0ab92fbb0cf99eb963c162a1553f0fae6f0
SHA512

1ecc6573b84491ff8db44708da4af3fb7a18c0f32b05c88f8717b37945f4d19847f88fdb2a2575dd86b2038b41ca97cc928e6f3a026ce0b1da0bac836df8896e
SSDEEP

384:xROOuK+tQdT+m+aLhAHAuOWbfbYq4kYwlyU37ijKeb14MI8yFRj2zXFtJXzpWErz:xEfm+aAHAuOMfUkHlyU3mvJbif2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3d5ca5bf17909e0e028cabacec4a3dbf_JaffaCakes118

Files

3d5ca5bf17909e0e028cabacec4a3dbf_JaffaCakes118
.exe windows:4 windows x86 arch:x86

67d174cc6c2b00e6687759b8a43fa99b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ResumeThread
SetThreadPriority
GetCurrentThread
SetPriorityClass
lstrcatA
GetEnvironmentVariableA
GetModuleFileNameA
lstrlenA
GetLastError
CopyFileA
GetSystemDirectoryA
GetModuleHandleA
lstrcmpA
WinExec
GlobalMemoryStatus
GetComputerNameA
GetCurrentProcess
GetTempPathA
DeleteFileA
CreateProcessA
ExitProcess
lstrcpyA
CreateThread
LoadLibraryA
GetProcAddress
FreeLibrary
Sleep
ExitThread
GetShortPathNameA
GetTickCount
GetStartupInfoA

user32

ExitWindowsEx
wsprintfA

advapi32

StartServiceA
RegSetValueExA
CloseServiceHandle
StartServiceCtrlDispatcherA
RegisterServiceCtrlHandlerA
SetServiceStatus
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
LookupPrivilegeValueA
AdjustTokenPrivileges
OpenProcessToken
OpenSCManagerA
OpenServiceA
DeleteService
CreateServiceA
RegOpenKeyA

shell32

ShellExecuteA

ws2_32

gethostbyname
inet_ntoa
connect
send
closesocket
recv
WSASocketA
setsockopt
htons
inet_addr
htonl
sendto
WSACleanup
WSAStartup
WSAGetLastError
socket

msvcrt

_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
_XcptFilter
_exit
_except_handler3
strncmp
exit
malloc
sprintf
time
rand
printf
strncpy
strcspn
strstr
srand

Sections

.data
Size: 28KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

67d174cc6c2b00e6687759b8a43fa99b

Headers

File Characteristics

Imports

kernel32

user32

advapi32

shell32

ws2_32

msvcrt

Sections

.data Size: 28KB - Virtual size: 48KB

.data
Size: 28KB - Virtual size: 48KB