74842f1f2e90b7d9184e6999a5df2094_JaffaCakes118

General

Target

74842f1f2e90b7d9184e6999a5df2094_JaffaCakes118
Size

116KB
MD5

74842f1f2e90b7d9184e6999a5df2094
SHA1

4cdb0d086ea827e1fb741ee7b90e56f07ecbb9e6
SHA256

bbefb010033a406ac3b25b87844fd626e5d531c093323a8f66e42f0c995ef85c
SHA512

d5baf3b0c9aa5053fd77accbacca406af045b8916cd8889788c1bfe4a3c61391998d65dcf72852d6cdf278f02f48cf2bcac55bebf4b07e86738133f8214d26b3
SSDEEP

1536:ErDQcW3X7QHmbRk4kybQUijm6pAFHd0bPo1XTOYYoNK0P7UO9tI:iDDW3XFkAWpAF9U8IoN1759t

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
74842f1f2e90b7d9184e6999a5df2094_JaffaCakes118

Files

74842f1f2e90b7d9184e6999a5df2094_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ff2db43f9161892bae6bdeff1f691b47

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

gethostbyname
select
__WSAFDIsSet
ntohl
send
WSAStartup
ioctlsocket
ntohs
WSASocketA
getsockname
bind
listen
htonl
connect
WSAAccept
getpeername
setsockopt
htons
WSAGetLastError
sendto
recvfrom
shutdown
closesocket

kernel32

IsDebuggerPresent
SetEnvironmentVariableA
CompareStringW
CompareStringA
SetEndOfFile
ReadFile
HeapSize
CreateProcessA
WaitForSingleObject
GetExitCodeProcess
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
CreateFileA
WriteConsoleW
GetConsoleOutputCP
Sleep
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
CloseHandle
GetCurrentProcessId
GetCurrentThreadId
FreeConsole
HeapAlloc
GetSystemTimeAsFileTime
GetLastError
HeapFree
ExitThread
CreateThread
GetTimeZoneInformation
GetCommandLineA
GetVersionExA
GetProcessHeap
VirtualFree
VirtualAlloc
HeapReAlloc
HeapDestroy
HeapCreate
GetProcAddress
GetModuleHandleA
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetHandleCount
GetFileType
GetStartupInfoA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
SetStdHandle
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
SetFilePointer
RtlUnwind
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
FlushFileBuffers
GetFileAttributesA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
LoadLibraryA
MultiByteToWideChar
WriteConsoleA

Sections

.text
Size: 92KB - Virtual size: 91KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

ff2db43f9161892bae6bdeff1f691b47

Headers

File Characteristics

Imports

ws2_32

kernel32

Sections

.text Size: 92KB - Virtual size: 91KB

.rdata Size: 12KB - Virtual size: 11KB

.data Size: 8KB - Virtual size: 12KB

.text
Size: 92KB - Virtual size: 91KB

.rdata
Size: 12KB - Virtual size: 11KB

.data
Size: 8KB - Virtual size: 12KB