718a22f45905fcf35642ae6e888b80cb_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

718a22f45905fcf35642ae6e888b80cb_JaffaCakes118
Size

235KB
MD5

718a22f45905fcf35642ae6e888b80cb
SHA1

35179fef8b3d6f0a39bb9f00fbe3455defc8cec9
SHA256

ec5b3468afa31c66a397bd153f6af91d286ace718dd25e57f57ad855ae76fae2
SHA512

907bae71547d25a0458a3fc840e46aeddbc2fb7e075c7c8dce0247fe02fb396447018227314dce65c2d6ab5e6b3521a5bba2b2e9c97f99ed862f397937a52a5f
SSDEEP

3072:5IqLm2S+2h7BBCzbtck7XJoFXHKj15XJ6GlBO7No5rvULEjIpnyGn:OqLFKh2bB7XEXqt6GeJSxjIpny2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
718a22f45905fcf35642ae6e888b80cb_JaffaCakes118

Files

718a22f45905fcf35642ae6e888b80cb_JaffaCakes118
.exe windows:5 windows x86 arch:x86

c0ae4fbdab0fdafc884ab69859f1d8ed

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

d:\내 문서\Visual Studio 2008\Projects\Winserver4\Release\Winserver4.pdb

Imports

user32

GetMessageA
GetDesktopWindow
GetWindowLongA
GetGUIThreadInfo
GetWindowTextA
GetForegroundWindow
GetKeyState

advapi32

RegSetValueExA
RegCloseKey
RegQueryValueExA
RegDeleteValueA
RegOpenKeyExA

ddraw

DirectDrawCreate

dinput8

DirectInput8Create

ole32

CoCreateInstance
CoUninitialize
CoInitialize

ws2_32

gethostname
connect
gethostbyname
inet_addr
recv
send
WSAGetLastError
inet_ntoa
listen
bind
htons
closesocket
ioctlsocket
socket
WSAStartup
htonl
select
__WSAFDIsSet
recvfrom
ntohs
sendto
accept

gdi32

CreateCompatibleDC
DeleteDC
CreateDIBSection
SelectObject
BitBlt
GetDIBColorTable
GetDeviceCaps
CreateDCA
DeleteObject

kernel32

GetLocaleInfoA
GetStringTypeW
GetStringTypeA
WriteConsoleW
WriteConsoleA
FlushFileBuffers
SetStdHandle
InitializeCriticalSectionAndSpinCount
VirtualAlloc
HeapReAlloc
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
VirtualFree
HeapCreate
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
SetEndOfFile
GetProcessHeap
GetConsoleOutputCP
GetVolumeInformationA
GetTickCount
OpenMutexA
Sleep
CreateMutexA
CloseHandle
GetLocalTime
GetTempPathA
GetSystemDirectoryA
GetModuleFileNameA
CreateProcessA
CreateThread
TerminateProcess
CreatePipe
WaitForSingleObject
PeekNamedPipe
ReadFile
WriteFile
LoadLibraryA
GetProcAddress
GetModuleHandleA
GetComputerNameA
FreeLibrary
TerminateThread
GetExitCodeThread
GetLastError
MultiByteToWideChar
WideCharToMultiByte
GetDriveTypeA
CreateFileA
GetCommandLineA
ExitProcess
GetFileSize
SetFilePointer
FindFirstFileA
FindNextFileA
FindClose
SetFileAttributesA
DeleteFileA
RemoveDirectoryA
InterlockedExchange
GetStartupInfoA
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapSize
EnterCriticalSection
LeaveCriticalSection
RtlUnwind
SetHandleCount
GetStdHandle
GetFileType
DeleteCriticalSection
GetConsoleCP
GetConsoleMode
HeapFree
HeapAlloc
RaiseException
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LCMapStringA
LCMapStringW
FreeEnvironmentStringsA

Sections

.text
Size: 117KB - Virtual size: 117KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 59KB - Virtual size: 124KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c0ae4fbdab0fdafc884ab69859f1d8ed

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

user32

advapi32

ddraw

dinput8

ole32

ws2_32

gdi32

kernel32

Sections

.text Size: 117KB - Virtual size: 117KB

.rdata Size: 23KB - Virtual size: 23KB

.data Size: 59KB - Virtual size: 124KB

.rsrc Size: 8KB - Virtual size: 7KB

.reloc Size: 9KB - Virtual size: 9KB

.text
Size: 117KB - Virtual size: 117KB

.rdata
Size: 23KB - Virtual size: 23KB

.data
Size: 59KB - Virtual size: 124KB

.rsrc
Size: 8KB - Virtual size: 7KB

.reloc
Size: 9KB - Virtual size: 9KB