74453591c378843d297d41447f110adf_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

74453591c378843d297d41447f110adf_JaffaCakes118
Size

66KB
MD5

74453591c378843d297d41447f110adf
SHA1

5a0e412524f7339b899e96d03a6eb88926a6c2ec
SHA256

6830ca68a0f71c310708af509bae6914547c088244afc5883d650cd5d97ce4a6
SHA512

6502f81d46fb1ad25da4304245801ba842d8e8b166e4723c936f58d8a2c1d962c9c928c774dc4c2a73e7d215785dd2bfc69876f33ad0d4af6d78c40219086262
SSDEEP

768:vH3C2BrX+mF1JmBwmLPs0es6vo/DFuB6UJvI5:vdBtfao6ug95

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
74453591c378843d297d41447f110adf_JaffaCakes118

Files

74453591c378843d297d41447f110adf_JaffaCakes118
.exe .vbs windows:4 windows x86 arch:x86 polyglot

4fa117ee09c9cf4162ea6840c168025d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

GetUserNameA

shell32

SHGetSpecialFolderPathA
ShellExecuteA
ShellExecuteExA

ws2_32

socket
WSACleanup
connect
recv
closesocket
gethostbyname
WSAStartup
send
htons

msvcp60

?open@?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAEXPBDH@Z
??0?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAE@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?open@?$basic_filebuf@DU?$char_traits@D@std@@@std@@QAEPAV12@PBDH@Z
??_D?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAEXXZ
?getline@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@PADHD@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDD@Z
??0?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAE@PBDH@Z
??0Init@ios_base@std@@QAE@XZ
??1Init@ios_base@std@@QAE@XZ
??1_Winit@std@@QAE@XZ
??_D?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAEXXZ
?close@?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAEXXZ
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@PBD@Z
??0_Winit@std@@QAE@XZ
?endl@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z

user32

wsprintfA

msvcrt

malloc
srand
_snprintf
printf
rand
time
__dllonexit
_onexit
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
sprintf
__CxxFrameHandler
_except_handler3
strstr
vsprintf
strtok

kernel32

GetStartupInfoA
CreateMutexA
GetLastError
SetErrorMode
CreateThread
GetDriveTypeA
CreateDirectoryA
FindFirstFileA
FindNextFileA
GetModuleHandleA
GetModuleFileNameA
SetFileAttributesA
DeleteFileA
CopyFileA
ExitProcess
GetLocaleInfoA
GetVersionExA
GetTickCount
GetFileAttributesA
Sleep
GetComputerNameA

Sections

.text
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 29KB - Virtual size: 112KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

4fa117ee09c9cf4162ea6840c168025d

Headers

File Characteristics

Imports

advapi32

shell32

ws2_32

msvcp60

user32

msvcrt

kernel32

Sections

.text Size: 25KB - Virtual size: 25KB

.rdata Size: 3KB - Virtual size: 2KB

.data Size: 7KB - Virtual size: 7KB

.rsrc Size: 29KB - Virtual size: 112KB

.text
Size: 25KB - Virtual size: 25KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 7KB - Virtual size: 7KB

.rsrc
Size: 29KB - Virtual size: 112KB