746f669584b608b1f0ae354a7308241a_JaffaCakes118

General

Target

746f669584b608b1f0ae354a7308241a_JaffaCakes118
Size

29KB
MD5

746f669584b608b1f0ae354a7308241a
SHA1

67d93bb554b8cc8d777c5bff4c9aba5892e2fef7
SHA256

90633daa0dc331ae5ccd5d88d94d19b12beddb100a4997a16d3786930deaed26
SHA512

1f83ffaa562a4d6a6cf0d037ebc27f37d885f8ea7193b70c74356d06701befd26849254d94807fc088a73b48b709cb6586b368351dbe963257b74335ffc10411
SSDEEP

384:jmcc4NTc5UY6sAtBq7mrnfaEivRWbiSHQLpXePI6o5gM9vb3maQu:jDN/tBqOnfaE8AbFhwta2viu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
746f669584b608b1f0ae354a7308241a_JaffaCakes118

Files

746f669584b608b1f0ae354a7308241a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

afba3321bf65908f13c52406dcf5b418

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalMemoryStatus
GetCurrentProcess
CreateProcessA
DeleteFileA
GetTempPathA
ExitProcess
GetComputerNameA
ResumeThread
SetThreadPriority
GetCurrentThread
SetPriorityClass
lstrcatA
GetShortPathNameA
GetModuleFileNameA
GetLastError
SetFileAttributesA
GetStartupInfoA
GetModuleHandleA
lstrlenA
CreateThread
GetVersionExA
lstrcpyA
GetProcAddress
FreeLibrary
Sleep
ExitThread
GetTickCount
LoadLibraryA

user32

wsprintfA
ExitWindowsEx

advapi32

SetServiceStatus
StartServiceA
RegOpenKeyA
CloseServiceHandle
StartServiceCtrlDispatcherA
RegisterServiceCtrlHandlerA
OpenSCManagerA
OpenServiceA
DeleteService
LookupPrivilegeValueA
AdjustTokenPrivileges
OpenProcessToken
RegCreateKeyA
RegSetValueExA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
CreateServiceA

shell32

ShellExecuteA

msvcrt

__set_app_type
rand
srand
time
strncpy
strcspn
strstr
sprintf
malloc
??2@YAPAXI@Z
exit
_except_handler3
_exit
_XcptFilter
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
_strnset
_controlfp

ws2_32

WSAStartup
sendto
setsockopt
WSASocketA
htons
socket
WSACleanup
connect
send
inet_ntoa
htonl
recv
WSAGetLastError
inet_addr
gethostbyname
closesocket

Sections

.text
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 864B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

afba3321bf65908f13c52406dcf5b418

Headers

File Characteristics

Imports

kernel32

user32

advapi32

shell32

msvcrt

ws2_32

Sections

.text Size: 22KB - Virtual size: 22KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 2KB - Virtual size: 5KB

.rsrc Size: 1024B - Virtual size: 864B

.text
Size: 22KB - Virtual size: 22KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 2KB - Virtual size: 5KB

.rsrc
Size: 1024B - Virtual size: 864B