66e82fc8dbe101072c0bdc9fa4c724c3_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

66e82fc8dbe101072c0bdc9fa4c724c3_JaffaCakes118
Size

151KB
MD5

66e82fc8dbe101072c0bdc9fa4c724c3
SHA1

4b4d150c2d5e90e1f6749725056c92f91b1049f9
SHA256

b2b689ffad55df9967457f887d3ac4d021f820fbece4c9b63a1d5513bdebc9c7
SHA512

7638a1aca2a7557e26067fefbc1d252313161d6094f76650fb876067b82b0594f22d05599e6b85846352373361ba7bacd0b810ffad2d97921b75d60a3f8c58ea
SSDEEP

3072:PKp1nouE3Rg5xF2IGjnZTsqzmCNtr6OUTmXKY+tk393J:Cnnov3RWjGqCr6OyHtk3j

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
66e82fc8dbe101072c0bdc9fa4c724c3_JaffaCakes118

Files

66e82fc8dbe101072c0bdc9fa4c724c3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

da4c70e36d7f9abece78b422d14387b8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LocalAlloc
GetCommandLineA
GetModuleHandleA
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
LoadLibraryA
GetProcAddress
IsBadWritePtr
HeapReAlloc
GetOEMCP
GetACP
GetCPInfo
FatalAppExitA
LeaveCriticalSection
VirtualAlloc
InitializeCriticalSection
RtlUnwind
VirtualFree
HeapCreate
HeapDestroy
GetCurrentThread
GetLastError
TlsGetValue
SetLastError
TlsFree
TlsAlloc
TlsSetValue
GetCurrentThreadId
DeleteCriticalSection
GetStartupInfoA
GetFileType
GetStdHandle
WriteFile
SetFilePointer
CloseHandle
GetProcessHeap
HeapFree
HeapAlloc
EnterCriticalSection
Sleep
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetModuleFileNameA
GetStringTypeW
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
ExitProcess
GetVersion

user32

SetScrollInfo
SendMessageW
GetClientRect
GetForegroundWindow
GetSystemMetrics
GetWindowRect
SetWindowsHookExA
SetWindowLongA
PostMessageA
IsDialogMessageA
SetWindowTextW
FindWindowW
IsIconic
LockWindowUpdate
CreateWindowExW
GetTopWindow
FrameRect
GetDoubleClickTime
SetParent
SetCursor
DestroyMenu
DispatchMessageA
SetMenuItemInfoA
GetMenuItemInfoA
GetMessageTime
DrawTextW
ScrollWindow
GetDlgCtrlID
GetSysColor
MapWindowPoints

advapi32

RegOpenKeyExA
OpenSCManagerA
RegQueryValueExA
OpenServiceA
OpenThreadToken
QueryServiceStatus
RegCloseKey

ole32

CoCreateInstance
CoInitialize
CoUninitialize
CLSIDFromString
CoRegisterClassObject

ws2_32

getservbyport
getprotobynumber
getsockname
htons
shutdown
setsockopt
WSAStartup
socket
WSACleanup
send
gethostbyname
gethostname
getpeername
sendto
getservbyname

Sections

.text
Size: 70KB - Virtual size: 69KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 45KB - Virtual size: 187KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

da4c70e36d7f9abece78b422d14387b8

Headers

File Characteristics

Imports

kernel32

user32

advapi32

ole32

ws2_32

Sections

.text Size: 70KB - Virtual size: 69KB

.rdata Size: 34KB - Virtual size: 34KB

.data Size: 45KB - Virtual size: 187KB

.text
Size: 70KB - Virtual size: 69KB

.rdata
Size: 34KB - Virtual size: 34KB

.data
Size: 45KB - Virtual size: 187KB