72bfdb96cb8858a25f1ab5764130c96d_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

72bfdb96cb8858a25f1ab5764130c96d_JaffaCakes118
Size

33KB
MD5

72bfdb96cb8858a25f1ab5764130c96d
SHA1

57d67848c3ca8cf7fac74ab33db7432be8671a62
SHA256

ce060143f83d59b1f0de7a96038da3d8debc26df7e2e02ea79a3e1e47f89c365
SHA512

0afa30be5716b869f16eaef3c12487941f3aa495b9e50a319ed7cdf5cbff6e08031a8a1ff34ce3edbdce5ad6e6a9957ae3fcbf65dbf7bd71c88a0d00ed021d5d
SSDEEP

768:2KKyM9lITIzwiXpDb0/huleNGzgK4o1A7dlAr2iJ:2GM9qTIx0/V7ro1AIrVJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
72bfdb96cb8858a25f1ab5764130c96d_JaffaCakes118

Files

72bfdb96cb8858a25f1ab5764130c96d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ff111dfaa941333b9f533c75d017f830

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegSetValueExA
RegCreateKeyExA
RegCloseKey

shell32

ShellExecuteA

ws2_32

WSACleanup
socket
ioctlsocket
connect
WSAStartup
WSASocketA
setsockopt
htons
sendto
closesocket

msvcr71

__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_acmdln
exit
_cexit
_ismbblead
_XcptFilter
_exit
_c_exit
?terminate@@YAXXZ
_onexit
__dllonexit
memcmp
strtok
_snprintf
strstr
_vsnprintf
strchr
__CxxFrameHandler
strcpy
??3@YAXPAX@Z
??2@YAPAXI@Z
strlen
strncpy
malloc
free
strcat
srand
atoi
rand
strcmp
memcpy
memset
sprintf
_CxxThrowException
??1type_info@@UAE@XZ
_amsg_exit

user32

CloseClipboard
SetClipboardData
keybd_event
BlockInput
SetFocus
ShowWindow
VkKeyScanA
OpenClipboard
EmptyClipboard
SetForegroundWindow

ole32

CoInitialize
CoUninitialize
CoCreateInstance

oleaut32

GetErrorInfo
VariantInit
SysAllocString
VariantClear
SysFreeString

kernel32

SetFilePointer
ReadFile
GetSystemTime
CreateFileA
LocalFree
MultiByteToWideChar
GetStartupInfoA
GetFileAttributesA
ExpandEnvironmentStringsA
CreateMutexA
WriteFile
CloseHandle
GetLastError
CreateProcessA
WaitForSingleObject
Sleep
ExitProcess
GetTickCount
ExitThread
QueryPerformanceFrequency
QueryPerformanceCounter
GetFileSize
GlobalUnlock
GlobalLock
GlobalAlloc
GetWindowsDirectoryA
GetModuleFileNameA
InterlockedDecrement
CopyFileA
SetFileAttributesA
CreateDirectoryA
lstrcatA
GetDriveTypeA
GetLogicalDriveStringsA
GetTempPathA
CreateThread
lstrcmpiA
GetLocaleInfoA
GetVersionExA
LoadLibraryA
GetProcAddress
GetModuleHandleA
TerminateThread
ReleaseMutex
lstrlenA

Sections

.text
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 271KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 944B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ff111dfaa941333b9f533c75d017f830

Headers

File Characteristics

Imports

advapi32

shell32

ws2_32

msvcr71

user32

ole32

oleaut32

kernel32

Sections

.text Size: 22KB - Virtual size: 21KB

.rdata Size: 7KB - Virtual size: 7KB

.data Size: 1KB - Virtual size: 271KB

.rsrc Size: 1024B - Virtual size: 944B

.text
Size: 22KB - Virtual size: 21KB

.rdata
Size: 7KB - Virtual size: 7KB

.data
Size: 1KB - Virtual size: 271KB

.rsrc
Size: 1024B - Virtual size: 944B