5abce324465e57ccf9edc64091c8e4a5_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

5abce324465e57ccf9edc64091c8e4a5_JaffaCakes118
Size

43KB
MD5

5abce324465e57ccf9edc64091c8e4a5
SHA1

95cbc6b8abd8bb6ec8e9c7606fd4abfdaa1e0ab0
SHA256

0387e642f0e631b8046aba70de6cc678b65bc2c1d6125ddc9a93d4361df6c708
SHA512

987a12f6be867f8d0bf3b2514fb334316e425af980e26ebd33fa257e502953e89dd296a54516537a56d7a06886b1eb106bcb31f0e3a42c4db7fed02dd66caacb
SSDEEP

768:8hE+MaSYZqf3PnuSwTdnCDi85msIIt6Entvhr4o:+SYZqvohoi8ICJtvB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5abce324465e57ccf9edc64091c8e4a5_JaffaCakes118

Files

5abce324465e57ccf9edc64091c8e4a5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

fe9583d689556df2ab86f5b311fd2102

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

WSACleanup
connect
socket
htons
ioctlsocket
getsockname
inet_addr
gethostbyname
WSAStartup
closesocket
recv
select
send

advapi32

RegCreateKeyExA
RegSetValueExA
RegCloseKey
RegDeleteKeyA
RegDeleteValueA
GetUserNameA

kernel32

ReadFile
SetEndOfFile
LoadLibraryA
GetOEMCP
GetACP
GetCPInfo
LocalFree
RaiseException
SetUnhandledExceptionFilter
IsBadCodePtr
GetProcAddress
Sleep
GetTickCount
ExitThread
ExitProcess
GetLastError
CreateMutexA
SetErrorMode
CopyFileA
SetFileAttributesA
GetFileAttributesA
lstrcmpiA
GetWindowsDirectoryA
GetModuleFileNameA
GetModuleHandleA
lstrlenA
CreateThread
CloseHandle
CreateProcessA
ExpandEnvironmentStringsA
GetSystemDefaultLangID
GlobalUnlock
GlobalLock
GlobalAlloc
CreateFileA
GetVersionExA
GetLocaleInfoA
TerminateThread
WaitForSingleObject
GetTempPathA
RtlUnwind
GetFileType
GetStdHandle
SetFilePointer
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
WriteFile
HeapReAlloc
VirtualAlloc
HeapFree
FlushFileBuffers
SetStdHandle
GetStringTypeW
GetStringTypeA
VirtualFree
HeapCreate
HeapDestroy
LCMapStringW
LCMapStringA
MultiByteToWideChar
WideCharToMultiByte
GetVersion
HeapAlloc
GetStartupInfoA
GetCommandLineA

user32

BlockInput
SetForegroundWindow
SetFocus
ShowWindow
keybd_event
VkKeyScanA
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
SendMessageA
FindWindowExA
FindWindowA
IsWindow

shlwapi

PathRemoveFileSpecA

ole32

CoCreateInstance
CoInitialize
CoUninitialize

oleaut32

VariantClear
SysAllocString
VariantInit

Sections

.text
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

fe9583d689556df2ab86f5b311fd2102

Headers

File Characteristics

Imports

ws2_32

advapi32

kernel32

user32

shlwapi

ole32

oleaut32

Sections

.text Size: 32KB - Virtual size: 31KB

.rdata Size: 4KB - Virtual size: 4KB

.data Size: 5KB - Virtual size: 14KB

.text
Size: 32KB - Virtual size: 31KB

.rdata
Size: 4KB - Virtual size: 4KB

.data
Size: 5KB - Virtual size: 14KB