6fdda5b8c8b402975b40ca24a7b6a759_JaffaCakes118

General

Target

6fdda5b8c8b402975b40ca24a7b6a759_JaffaCakes118
Size

48KB
MD5

6fdda5b8c8b402975b40ca24a7b6a759
SHA1

5d76952f1e618a7b7e2fa8510b4583ad25ac4ae4
SHA256

033c8ddc982d6c4ae2dbc47c1d34ff9af75efab7e0a0ae00613e779216022514
SHA512

993b8bee2191bed7a92fc23912eef8ed8d10ab214e2a6a77217a17525c8264b8fbfadd658059b04963292355addf3ccfaee651f1f673967f673eccba45291203
SSDEEP

768:opLnSBR/7LaFN32/SyrCASpFV3KPa/o5:ALnyR8gSyrJSp7CEo5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6fdda5b8c8b402975b40ca24a7b6a759_JaffaCakes118

Files

6fdda5b8c8b402975b40ca24a7b6a759_JaffaCakes118
.exe windows:4 windows x86 arch:x86

176503e06cc0b5dba1b8a28572f41f15

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcatA
CreateThread
CopyFileA
CreateDirectoryA
GetSystemDirectoryA
GetModuleFileNameA
VirtualProtectEx
GetCurrentProcess
GetLastError
CreateMutexA
GetCommandLineA
GetTickCount
DeleteFileA
LoadLibraryA
GetProcAddress
Sleep
CreateFileA
GetVolumeInformationA
CreateProcessA
lstrlenA
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
SetEndOfFile
GetOEMCP
GetACP
GetCPInfo
SetFilePointer
FlushFileBuffers
GetStringTypeW
GetModuleHandleA
GetStartupInfoA
GetVersion
ExitProcess
HeapAlloc
HeapFree
CloseHandle
ReadFile
TerminateProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
RtlUnwind
WriteFile
VirtualAlloc
HeapReAlloc
SetStdHandle

advapi32

RegOpenKeyExA
RegDeleteKeyA
RegDeleteValueA
RegCreateKeyExA
RegSetValueExA
RegCloseKey

ws2_32

ioctlsocket
recv
inet_ntoa
WSAStartup
socket
setsockopt
gethostname
gethostbyname
htons
bind

Sections

.text
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

176503e06cc0b5dba1b8a28572f41f15

Headers

File Characteristics

Imports

kernel32

advapi32

ws2_32

Sections

.text Size: 28KB - Virtual size: 26KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 12KB - Virtual size: 61KB

.text
Size: 28KB - Virtual size: 26KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 12KB - Virtual size: 61KB