4b66b74d3b6d4a18fa7b60422417233a_JaffaCakes118

General

Target

4b66b74d3b6d4a18fa7b60422417233a_JaffaCakes118
Size

240KB
MD5

4b66b74d3b6d4a18fa7b60422417233a
SHA1

88e22dd73d5266be975eec552971137ef6e53a0a
SHA256

8a16f232000e39b7a9b403f67eaa283db909f19c7648c6b801f9d6ecaab3ae95
SHA512

acaf8cf2d9274f390e238b34b45735641496ebab58fd3d86e6e8971791bc4686e82d7e2fd0aafd333f4edee633a96925ef1bfecf0eabf358fb93615963f1d4ed
SSDEEP

6144:1m9JU4RzbFdjWkIH0Phlcj+YRV/AHl2qa4aXP8:1m9JU4RzbjpiRR0lJa4aE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4b66b74d3b6d4a18fa7b60422417233a_JaffaCakes118

Files

4b66b74d3b6d4a18fa7b60422417233a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9bd03c0e8315b2653395d083d9b93435

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

htonl
htons
gethostbyaddr
WSAStartup
getservbyport
gethostname

iphlpapi

GetTcpTable
GetUdpTable

kernel32

HeapCreate
SetStdHandle
FlushFileBuffers
GetOEMCP
GetACP
GetCPInfo
GetStringTypeW
GetStringTypeA
SetFilePointer
GetLastError
LocalFree
FormatMessageA
GetModuleHandleA
GetProcAddress
LoadLibraryA
GetProcessHeap
GetVersion
HeapAlloc
GetCommandLineA
ExitProcess
WideCharToMultiByte
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
CloseHandle
VirtualFree
HeapFree
VirtualAlloc
HeapReAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
RtlUnwind
WriteFile

Sections

.idata
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 12KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 960B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 192KB - Virtual size: 308KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

9bd03c0e8315b2653395d083d9b93435

Headers

File Characteristics

Imports

ws2_32

iphlpapi

kernel32

Sections

.idata Size: 24KB - Virtual size: 20KB

.rdata Size: 4KB - Virtual size: 2KB

.text Size: 12KB - Virtual size: 16KB

.rsrc Size: 4KB - Virtual size: 960B

.data Size: 192KB - Virtual size: 308KB

.idata
Size: 24KB - Virtual size: 20KB

.rdata
Size: 4KB - Virtual size: 2KB

.text
Size: 12KB - Virtual size: 16KB

.rsrc
Size: 4KB - Virtual size: 960B

.data
Size: 192KB - Virtual size: 308KB