6098e8bcc152d703ac49250ccf56fef2_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

6098e8bcc152d703ac49250ccf56fef2_JaffaCakes118
Size

32KB
MD5

6098e8bcc152d703ac49250ccf56fef2
SHA1

659b8a9eacd7023fe91c7b5015dc4729262e5eca
SHA256

c2eb171a8d60b097c1263dddb163c63a94f5ee2bb65069f93ec385e531ce944e
SHA512

e7d98cc1ad87f8e7e103b3f581c4d572567a40c1ab45a1ba1fb809f984c8acaf6012e8606cc6449b488a2aed9dd114f6a58edb72339d0a0f472a64b0732f8932
SSDEEP

768:Mb8nseCSsOEA6m3sfhkzU8mcsxJxtkg/d+:ukseCSs9p4pitkgw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6098e8bcc152d703ac49250ccf56fef2_JaffaCakes118

Files

6098e8bcc152d703ac49250ccf56fef2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9d3203c999fb5485428d6332c5311e33

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

gethostbyname
connect
socket
htons
send
select
ioctlsocket
inet_addr
gethostname
WSAStartup
inet_ntoa
WSACleanup
closesocket
recv

shell32

ShellExecuteA

advapi32

RegCreateKeyA
RegSetValueExA
RegCloseKey
RegCreateKeyExA

kernel32

LocalFree
FlushFileBuffers
SetStdHandle
LoadLibraryA
RaiseException
GetACP
GetCPInfo
GetStringTypeW
GetStringTypeA
GetEnvironmentStrings
FreeEnvironmentStringsW
SetUnhandledExceptionFilter
IsBadCodePtr
GetOEMCP
ExitProcess
Sleep
GetLastError
GetModuleHandleA
GetCurrentProcess
GetProcAddress
GetTempPathA
GetTickCount
ExitThread
GetDriveTypeA
GetLogicalDriveStringsA
WritePrivateProfileStringA
GetPrivateProfileStringA
CopyFileA
GetModuleFileNameA
CreateThread
GetVersionExA
SetFileAttributesA
GetSystemDirectoryA
ExpandEnvironmentStringsA
CreateMutexA
GetSystemDefaultLangID
GlobalUnlock
GlobalLock
GlobalAlloc
GlobalFree
WinExec
lstrcatA
lstrlenA
CloseHandle
CreateFileA
GetLocaleInfoA
FreeEnvironmentStringsA
UnhandledExceptionFilter
TerminateProcess
HeapReAlloc
VirtualAlloc
HeapFree
VirtualFree
HeapCreate
HeapDestroy
LCMapStringW
LCMapStringA
MultiByteToWideChar
SetFilePointer
WriteFile
RtlUnwind
GetFileType
GetStdHandle
SetHandleCount
WideCharToMultiByte
GetVersion
GetCommandLineA
GetStartupInfoA
HeapAlloc
GetEnvironmentStringsW

user32

keybd_event
SetFocus
ShowWindow
BlockInput
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
FindWindowA
VkKeyScanA
wsprintfA
SetForegroundWindow

urlmon

URLDownloadToFileA

ole32

CoInitialize
CoUninitialize
CoCreateInstance

oleaut32

VariantClear
SysAllocString
VariantInit

Sections

.text
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

9d3203c999fb5485428d6332c5311e33

Headers

File Characteristics

Imports

ws2_32

shell32

advapi32

kernel32

user32

urlmon

ole32

oleaut32

Sections

.text Size: 23KB - Virtual size: 22KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 4KB - Virtual size: 12KB

.text
Size: 23KB - Virtual size: 22KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 4KB - Virtual size: 12KB