3f691182fb44d1712a6f4a52b7e623ca_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

3f691182fb44d1712a6f4a52b7e623ca_JaffaCakes118
Size

205KB
MD5

3f691182fb44d1712a6f4a52b7e623ca
SHA1

9136b2e9066ea3c52272d6d3b334dbb389b98742
SHA256

114f2a1e70a24ff6b8b64f3c4b9ce908bc9acabb7161d402b811a9d3882d4864
SHA512

dc770100402932c60cbc4a0d0196094dc2b5f9249b2d2c38665a999103f640904fd6e6177824b66b354056d600b504c8ff4d07d6b254adbe59501fb1d6702745
SSDEEP

6144:fezFK+wG8+4dlg8XlSwJyb1qvDBX1GnAi:fSY+wG8Giyb+inh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3f691182fb44d1712a6f4a52b7e623ca_JaffaCakes118

Files

3f691182fb44d1712a6f4a52b7e623ca_JaffaCakes118
.exe windows:4 windows x86 arch:x86

fe612bf06f82386f1a2192b261550b28

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadResource
GetTickCount
WriteFile
Sleep
SizeofResource
GetSystemDirectoryA
lstrcatA
GetProcAddress
LoadLibraryA
LockResource
GetModuleFileNameA
GetModuleHandleA
ReleaseMutex
CloseHandle
FindResourceA
GetTempPathA
lstrcpyA
GetStdHandle
GetLastError
DeleteTimerQueue
SetFileTime
CompareStringW
CompareStringA
GetSystemInfo
VirtualProtect
HeapSize
LCMapStringW
GetVersion
CreateFileA
LCMapStringA
GetStringTypeW
MultiByteToWideChar
GetStringTypeA
GetLocaleInfoA
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
FindFirstFileA
FindNextFileA
GetSystemTimeAsFileTime
GetStartupInfoA
GetCommandLineA
GetVersionExA
EnterCriticalSection
LeaveCriticalSection
TlsAlloc
SetLastError
GetCurrentThreadId
TlsFree
TlsSetValue
TlsGetValue
ExitProcess
HeapFree
HeapAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
HeapDestroy
HeapCreate
VirtualFree
SetFilePointer
RtlUnwind
InterlockedExchange
VirtualQuery
GetACP
GetOEMCP
GetCPInfo
GetTimeZoneInformation
QueryPerformanceCounter
GetCurrentProcessId
VirtualAlloc
HeapReAlloc
InitializeCriticalSection
SetStdHandle
FlushFileBuffers
SetEnvironmentVariableA

user32

IsWindow
GetGuiResources
OpenIcon
CharToOemA

advapi32

RegOpenKeyExA

ws2_32

socket
gethostbyname
bind
WSACleanup
shutdown
htons
WSAStartup
connect
closesocket

Sections

.text
Size: 53KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 137KB - Virtual size: 137KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fe612bf06f82386f1a2192b261550b28

Headers

File Characteristics

Imports

kernel32

user32

advapi32

ws2_32

Sections

.text Size: 53KB - Virtual size: 52KB

.rdata Size: 10KB - Virtual size: 10KB

.data Size: 3KB - Virtual size: 9KB

.rsrc Size: 137KB - Virtual size: 137KB

.text
Size: 53KB - Virtual size: 52KB

.rdata
Size: 10KB - Virtual size: 10KB

.data
Size: 3KB - Virtual size: 9KB

.rsrc
Size: 137KB - Virtual size: 137KB