6767d54b799b2c51bc4306014a03115a_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

6767d54b799b2c51bc4306014a03115a_JaffaCakes118
Size

119KB
MD5

6767d54b799b2c51bc4306014a03115a
SHA1

a8b5175c9082b59714f07503242dfb14d9111387
SHA256

5f0c26aadefaffa445c029edb64d4cc54e129ec54cb6f8a1620593c3ef4e8426
SHA512

5fc4e9a855a27fc6f92ebd056a537680fceb92ec34278f62f26ad23afde4823866971e32696e6c0e0afa62506c568b8ae0c2edb890cd430c445674810b2363c9
SSDEEP

1536:6rjBXYqS7Z5t0FkQWVrAxYQEaEM/nToIfCRIOlIO5e2x0Em55:QNYqEeXWtjiTBfqvVx0Em55

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6767d54b799b2c51bc4306014a03115a_JaffaCakes118

Files

6767d54b799b2c51bc4306014a03115a_JaffaCakes118
.exe windows:5 windows x86 arch:x86

6fc34840a45895d35cccdaea570c2f9e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

wsock32

recvfrom
closesocket
bind
WSAStartup
gethostbyname
gethostname
listen
accept
recv
inet_addr
ioctlsocket
connect
send
socket
htons
htonl
sendto

imagehlp

MapAndLoad
UnMapAndLoad

mpr

WNetAddConnection2A
WNetCancelConnectionA

kernel32

GetProcessHeap
SetEndOfFile
HeapSize
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
InitializeCriticalSectionAndSpinCount
SetStdHandle
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
QueryPerformanceCounter
CloseHandle
Sleep
GlobalFree
GlobalAlloc
ReadFile
CreateFileA
ExitThread
GetTickCount
GetCurrentProcessId
ExitProcess
Process32Next
TerminateProcess
OpenProcess
Process32First
CreateToolhelp32Snapshot
CopyFileA
GetSystemDirectoryA
GetWindowsDirectoryA
GetModuleFileNameA
GetLastError
CreateMutexA
GetDriveTypeA
WriteFile
SetFilePointer
FreeLibrary
GetProcAddress
LoadLibraryA
FindClose
FileTimeToDosDateTime
FileTimeToLocalFileTime
FindFirstFileA
GetFileSize
GetSystemTime
DeleteFileA
SetCurrentDirectoryA
FindNextFileA
GetEnvironmentStringsW
FreeEnvironmentStringsW
CreateThread
HeapFree
GetEnvironmentStrings
FreeEnvironmentStringsA
HeapAlloc
GetSystemTimeAsFileTime
GetCommandLineA
GetStartupInfoA
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
EnterCriticalSection
LeaveCriticalSection
MultiByteToWideChar
HeapCreate
VirtualFree
DeleteCriticalSection
VirtualAlloc
HeapReAlloc
FlushFileBuffers
SetHandleCount
GetStdHandle
GetFileType
RtlUnwind
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LCMapStringA
LCMapStringW

user32

MessageBoxA

advapi32

RegSetValueExA
RegCloseKey
RegOpenKeyExA

shell32

ShellExecuteA

Sections

.text
Size: 72KB - Virtual size: 71KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6fc34840a45895d35cccdaea570c2f9e

Headers

DLL Characteristics

File Characteristics

Imports

wsock32

imagehlp

mpr

kernel32

user32

advapi32

shell32

Sections

.text Size: 72KB - Virtual size: 71KB

.rdata Size: 27KB - Virtual size: 26KB

.data Size: 16KB - Virtual size: 23KB

.rsrc Size: 3KB - Virtual size: 2KB

.text
Size: 72KB - Virtual size: 71KB

.rdata
Size: 27KB - Virtual size: 26KB

.data
Size: 16KB - Virtual size: 23KB

.rsrc
Size: 3KB - Virtual size: 2KB