6766961d88bff7418f20c52335ca056a_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

6766961d88bff7418f20c52335ca056a_JaffaCakes118
Size

72KB
MD5

6766961d88bff7418f20c52335ca056a
SHA1

d7950885cbf47da0e29de82a96bd89738e423c56
SHA256

43658c263f3cc1aaaf9eaaf27f39de5b27a2d3a91c8abf0f235b5ff644eb728a
SHA512

4533f81d74c9d194ba088dc064a90567c4ec1f220db93e7ae53b837d9a6e4d4d4ae40946d1a4b448698156ec3b87dead74d81ee73336e19d3a528231693d5343
SSDEEP

768:EDwsjUbjYwSybWCbASi+b0wJsC7Sohq+IMKWxtIJVLDGqDbo3oe0YJTtQpFZ2jqr:IwEUfq6fbqNMKwtgnGibJe0AtQjZ2M

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6766961d88bff7418f20c52335ca056a_JaffaCakes118

Files

6766961d88bff7418f20c52335ca056a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

596d440c0f2962b9d42ec12fce81c4cd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalAlloc
ExitProcess
InterlockedDecrement
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
SetEndOfFile
ReadFile
LoadLibraryA
GetProcAddress
SetEnvironmentVariableA
GetOEMCP
GetACP
CompareStringW
CompareStringA
GetCPInfo
CreateFileA
CreateProcessA
MultiByteToWideChar
GetLastError
WideCharToMultiByte
LocalFree
HeapAlloc
RtlUnwind
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
RaiseException
HeapFree
TerminateProcess
GetCurrentProcess
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
IsBadWritePtr
CloseHandle
GetFileAttributesA
HeapSize
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
WriteFile
FlushFileBuffers
SetFilePointer
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
SetStdHandle
GetExitCodeProcess
WaitForSingleObject

ole32

CoInitialize
CoUninitialize
CoCreateInstance

oleaut32

SysFreeString
VariantClear
SysAllocString

ws2_32

WSACleanup
closesocket
recv
send
WSAStartup
socket
gethostbyname
connect
htons

Sections

.text
Size: 47KB - Virtual size: 47KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sxdata
Size: 512B - Virtual size: 124B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

596d440c0f2962b9d42ec12fce81c4cd

Headers

File Characteristics

Imports

kernel32

ole32

oleaut32

ws2_32

Sections

.text Size: 47KB - Virtual size: 47KB

.rdata Size: 7KB - Virtual size: 6KB

.data Size: 12KB - Virtual size: 18KB

.sxdata Size: 512B - Virtual size: 124B

.reloc Size: 4KB - Virtual size: 4KB

.text
Size: 47KB - Virtual size: 47KB

.rdata
Size: 7KB - Virtual size: 6KB

.data
Size: 12KB - Virtual size: 18KB

.sxdata
Size: 512B - Virtual size: 124B

.reloc
Size: 4KB - Virtual size: 4KB