63822f06ee717efcfd9f5621a84090dc_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

63822f06ee717efcfd9f5621a84090dc_JaffaCakes118
Size

582KB
MD5

63822f06ee717efcfd9f5621a84090dc
SHA1

c7759ad05fe9bcf0368ce66a7500df444029ee60
SHA256

c8620d482852b0b5e4df6a9d62f1b76c41b2861a9aea5b76a03404729f329593
SHA512

93ff9cff437a214a859f49a375944adc86e32e498ba7990655b2d9c13070d87e4ae95e4d9632412f3ccc4320459e0fb0336c01f15f33929c459d7fc67eb0d900
SSDEEP

12288:YRWb1UKcy4J+oC6UNGq4oSmxe9IsY1vuserlepxGwmn+y63c9iMLOkZ+BvRMyurc:YRWb1R4Jr4OoSByxslepxGwmn+y63c9M

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
63822f06ee717efcfd9f5621a84090dc_JaffaCakes118

Files

63822f06ee717efcfd9f5621a84090dc_JaffaCakes118
.exe windows:6 windows x86 arch:x86

1dbda31bc076c06b536f7d0d1279becd

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

WSACleanup
WSAStartup
shutdown
__WSAFDIsSet
closesocket
getpeername
recv
select
getnameinfo
send
bind
WSAGetLastError
socket
setsockopt
listen
htons
htonl
accept

ssleay32

ord78
ord108

libeay32

ord199
ord1515
ord2291
ord784
ord808
ord811

kernel32

LCMapStringW
CompareStringW
HeapFree
HeapAlloc
GetFullPathNameW
SetFilePointerEx
GetCurrentDirectoryW
SetCurrentDirectoryW
SetEnvironmentVariableW
SetEnvironmentVariableA
CloseHandle
GetLastError
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
SetEvent
WaitForSingleObject
CreateEventA
OpenEventA
GetCurrentProcessId
TerminateProcess
GetCurrentThreadId
TerminateThread
OpenProcess
GetTickCount
PostQueuedCompletionStatus
CreateFileW
CreateIoCompletionPort
GetQueuedCompletionStatus
ReadDirectoryChangesW
MultiByteToWideChar
WideCharToMultiByte
GetExitCodeProcess
GetProcessId
GetDiskFreeSpaceExA
GetThreadId
CreateFileA
FlushFileBuffers
GetTempPathA
FormatMessageA
CreateDirectoryW
DeleteFileA
FindClose
FindFirstFileW
FindNextFileW
GetFileAttributesA
SetEndOfFile
SetFileAttributesA
Sleep
GetStdHandle
GetCommandLineW
GetEnvironmentStrings
FreeEnvironmentStringsA
ReadFile
WriteFile
SetHandleInformation
SetErrorMode
CreatePipe
CreateProcessW
LockFileEx
UnlockFileEx
FreeLibrary
GetProcAddress
DuplicateHandle
GetFileSizeEx
GetCPInfo
MoveFileExW
IsValidCodePage
GetACP
GetOEMCP
GetEnvironmentStringsW
FreeEnvironmentStringsW
DecodePointer
GetStringTypeW
GetProcessHeap
HeapSize
HeapReAlloc
WriteConsoleW
GlobalMemoryStatusEx
GetConsoleCP
ReadConsoleW
GetConsoleMode
GetCommandLineA
ExitProcess
GetModuleFileNameW
PeekNamedPipe
GetFileInformationByHandle
GetDriveTypeW
RemoveDirectoryW
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
FindFirstFileExW
GetFileAttributesExW
GetTimeZoneInformation
SystemTimeToFileTime
TzSpecificLocalTimeToSystemTime
SetFileTime
DeleteFileW
GetFileType
SetStdHandle
GetModuleHandleExW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
RtlUnwind
SetLastError
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
RaiseException
CreateThread
ExitThread
FreeLibraryAndExitThread

advapi32

SetServiceStatus
StartServiceCtrlDispatcherA
RegisterServiceCtrlHandlerExA
OpenServiceA
OpenSCManagerA
DeleteService
CreateServiceA
CloseServiceHandle
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey

Sections

.text
Size: 327KB - Virtual size: 327KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 101KB - Virtual size: 101KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 133KB - Virtual size: 221KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1dbda31bc076c06b536f7d0d1279becd

Headers

DLL Characteristics

File Characteristics

Imports

ws2_32

ssleay32

libeay32

kernel32

advapi32

Sections

.text Size: 327KB - Virtual size: 327KB

.rdata Size: 101KB - Virtual size: 101KB

.data Size: 133KB - Virtual size: 221KB

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 18KB - Virtual size: 17KB

.text
Size: 327KB - Virtual size: 327KB

.rdata
Size: 101KB - Virtual size: 101KB

.data
Size: 133KB - Virtual size: 221KB

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 18KB - Virtual size: 17KB