5f407e908888a366573925159fc36474_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

5f407e908888a366573925159fc36474_JaffaCakes118
Size

576KB
MD5

5f407e908888a366573925159fc36474
SHA1

564ff6296e17edea0023349f1394516f7d9a2a23
SHA256

6778a205105264618e045d8fcf75e097d43bf74a758859141c1a0e6b6a574c1b
SHA512

080d794ce7f1f126c80b99ac48ea7f73a90c7bb7790cee0a25ec6a8d85b198084858f07a5b2d92b7c6d69d1e91a0c2a1695bed13a059e423b3237db8b35e92b3
SSDEEP

6144:bQxvduEg7a+37dELU9JzUwcwZT6f52e6cjPLLlCKSo6X3fNNE4pu7E5R79Gd515p:Mxvd7QLJUINHcjPYKy34/WCJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5f407e908888a366573925159fc36474_JaffaCakes118

Files

5f407e908888a366573925159fc36474_JaffaCakes118
.exe windows:4 windows x86 arch:x86

39305b423d450b9e19a013868aaadb15

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetVersionExA
LoadLibraryA
GetProcAddress
GetTickCount
GlobalMemoryStatus
GetCurrentProcessId
CloseHandle
GetLastError
QueryPerformanceCounter
FlushConsoleInputBuffer
GetStdHandle
SleepEx
GetSystemTimeAsFileTime
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
GetCurrentThreadId
InitializeCriticalSection
FileTimeToLocalFileTime
FileTimeToSystemTime
FreeLibrary
SetLastError

msvcrt

atol
atoi
_vsnprintf
isdigit
??2@YAPAXI@Z
_ftol
fprintf
signal
fflush
getchar
fgets
_iob
memmove
strftime
_fmode
realloc
tolower
_beginthread
_exit
time
exit
__p___initenv
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
strncmp
fopen
fclose
fread
fwrite
rename
remove
_fileno
strstr
strrchr
strncat
_utime
_stat
_findclose
_findnext
longjmp
_setjmp3
fputs
getenv
fseek
ftell
_setmode
strcmp
gmtime
memchr
qsort
bsearch
_isctype
strchr
_findfirst
printf
toupper
sscanf
sprintf
__CxxFrameHandler
calloc
strncpy
malloc
free
??3@YAXPAX@Z
_XcptFilter
_strcmpi
_getcwd
_mkdir
_rmdir
_close
_open
_write
_lseek
_read
_ftime
_stricmp
_getch
_assert
_pctype
__mb_cur_max

ws2_32

WSAGetLastError
ioctlsocket
connect
getsockopt
__WSAFDIsSet
select
setsockopt
send
recv
inet_ntoa
gethostbyaddr
getpeername
getsockname
ntohs
closesocket
shutdown
accept
htonl
bind
listen
socket
inet_addr
htons
WSAStartup
WSACleanup
gethostbyname
WSASetLastError

Sections

.text
Size: 448KB - Virtual size: 448KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 52KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

39305b423d450b9e19a013868aaadb15

Headers

File Characteristics

Imports

kernel32

msvcrt

ws2_32

Sections

.text Size: 448KB - Virtual size: 448KB

.rdata Size: 60KB - Virtual size: 60KB

.data Size: 52KB - Virtual size: 52KB

Size: 12KB - Virtual size: 12KB

.text
Size: 448KB - Virtual size: 448KB

.rdata
Size: 60KB - Virtual size: 60KB

.data
Size: 52KB - Virtual size: 52KB