40b665541790b90c746dd79346e66347_JaffaCakes118

General

Target

40b665541790b90c746dd79346e66347_JaffaCakes118
Size

72KB
MD5

40b665541790b90c746dd79346e66347
SHA1

b0ffe7bf634c0d4fb5e9c71090984ca999de7d75
SHA256

a1d215e55bc3ab0a3608ee7402ed780222fd88ee09665eef40d6853a522dc3a1
SHA512

38b7ce0286a0f163631ff9ab360f7d32c108e368f9ddc9f67316b00aae12674892b2c6198fc9e350a747e114c9b82d84e6588e07d4c1a5a7c34499fc0fc8a85f
SSDEEP

768:8Dcy9kWlZMJKXY2Sm84DZvH/wkbda0XYQt7Vq+crXatGuo:8Dc14LDZgsZXYQtpArQto

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
40b665541790b90c746dd79346e66347_JaffaCakes118

Files

40b665541790b90c746dd79346e66347_JaffaCakes118
.exe windows:4 windows x86 arch:x86

342044552e248d661611e1edb0f37a2d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CopyFileA
GetModuleFileNameA
CloseHandle
GetVersionExA
GetLastError
CreateThread
ReleaseSemaphore
WaitForSingleObject
CreateSemaphoreA
GetSystemDirectoryA
Sleep
CompareStringW
CompareStringA
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
ReadFile
SetEndOfFile
LoadLibraryA
GetProcAddress
GetOEMCP
GetACP
GetCPInfo
CreateFileA
SetFilePointer
FlushFileBuffers
SetStdHandle
IsBadCodePtr
RtlUnwind
GetTimeZoneInformation
GetSystemTime
GetLocalTime
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapFree
WriteFile
WideCharToMultiByte
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
HeapAlloc
VirtualAlloc
HeapReAlloc
IsBadWritePtr
SetUnhandledExceptionFilter
IsBadReadPtr
SetEnvironmentVariableA

advapi32

RegQueryValueExA
RegCreateKeyExA
RegSetValueExA
RegCloseKey
RegOpenKeyExA

ws2_32

recvfrom
sendto
recv
closesocket
socket
setsockopt
send
inet_addr
connect
WSAStartup
WSACleanup
select
gethostname
gethostbyname
inet_ntoa
__WSAFDIsSet
htons

netapi32

Netbios

Sections

.text
Size: 40KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 837KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

342044552e248d661611e1edb0f37a2d

Headers

File Characteristics

Imports

kernel32

advapi32

ws2_32

netapi32

Sections

.text Size: 40KB - Virtual size: 38KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 24KB - Virtual size: 837KB

.text
Size: 40KB - Virtual size: 38KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 24KB - Virtual size: 837KB