613947561425fa519f7eb154aae35a43_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

613947561425fa519f7eb154aae35a43_JaffaCakes118
Size

164KB
MD5

613947561425fa519f7eb154aae35a43
SHA1

914ba81f25a0a8caaaf759b33383a1e25fee1f24
SHA256

48f77d9779e6fe2028d40f06dd567cd865118bf80fa8388e6d478aa1a41f6248
SHA512

e7d3a57d723a765d7be81041d97ebbf0a055b936c36f7500ddb594b9fa7c2f16ed5ebf571fe930e2f5fb49f150c8f5e325736d637fea3cba2e5a352cb75c33df
SSDEEP

3072:kixD4bKXVItOp5hf93LzYQtIMCHbCEgYx3OIPn/5grAs7:zxEbKFIt+5hf93LCxCITnyv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
613947561425fa519f7eb154aae35a43_JaffaCakes118

Files

613947561425fa519f7eb154aae35a43_JaffaCakes118
.exe windows:5 windows x86 arch:x86

091b0b0ffd5cd29065e6be464bda6442

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

connect
WSAStartup
htons
WSACleanup
socket
closesocket
gethostbyname
recv
send

wininet

InternetCloseHandle
InternetOpenA
InternetReadFile
InternetOpenUrlA

kernel32

SetEndOfFile
GetLocaleInfoW
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
GetTimeZoneInformation
SetStdHandle
InitializeCriticalSectionAndSpinCount
LoadLibraryA
ExitProcess
CreateFileA
CreateMutexW
SystemTimeToFileTime
SetFileTime
GetDriveTypeA
Sleep
GetLastError
CopyFileA
GetProcessHeap
GetModuleFileNameA
ReleaseMutex
CloseHandle
GetTempPathA
GetSystemTime
DeleteFileA
WriteFile
FindResourceA
LoadResource
TerminateThread
SizeofResource
LockResource
CreateThread
GetTickCount
GetLogicalDriveStringsA
CompareStringA
CompareStringW
SetEnvironmentVariableA
InitializeCriticalSection
SetFileAttributesA
IsValidCodePage
IsValidLocale
EnumSystemLocalesA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapFree
HeapAlloc
HeapReAlloc
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
FindFirstFileA
GetStartupInfoW
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
CreateFileW
GetModuleHandleW
GetProcAddress
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
LCMapStringA
WideCharToMultiByte
MultiByteToWideChar
LCMapStringW
HeapSize
RaiseException
HeapCreate
VirtualFree
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
GetStdHandle
RtlUnwind
ReadFile
GetFullPathNameA
GetCurrentDirectoryA
SetHandleCount
GetFileType
GetStartupInfoA
GetConsoleCP
GetConsoleMode
FlushFileBuffers
SetFilePointer
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetStringTypeA
GetStringTypeW
GetUserDefaultLCID
GetLocaleInfoA

advapi32

RegSetValueExA
RegCloseKey
RegOpenKeyA
RegDeleteValueA

shell32

ShellExecuteA
SHGetSpecialFolderPathA

Sections

.text
Size: 116KB - Virtual size: 116KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 96KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

091b0b0ffd5cd29065e6be464bda6442

Headers

DLL Characteristics

File Characteristics

Imports

ws2_32

wininet

kernel32

advapi32

shell32

Sections

.text Size: 116KB - Virtual size: 116KB

.rdata Size: 22KB - Virtual size: 22KB

.data Size: 15KB - Virtual size: 15KB

.rsrc Size: 96KB - Virtual size: 96KB

.reloc Size: 8KB - Virtual size: 8KB

.text
Size: 116KB - Virtual size: 116KB

.rdata
Size: 22KB - Virtual size: 22KB

.data
Size: 15KB - Virtual size: 15KB

.rsrc
Size: 96KB - Virtual size: 96KB

.reloc
Size: 8KB - Virtual size: 8KB