7851e2cf7b829b306a9c542c0b3dbc3d_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

7851e2cf7b829b306a9c542c0b3dbc3d_JaffaCakes118
Size

575KB
MD5

7851e2cf7b829b306a9c542c0b3dbc3d
SHA1

44f28c4abe76a860b3fd75d8b37b259a390238c6
SHA256

b40f2871de4ad05c529aa88684b3d99905dad3dfb8fa1626cf1b8e323f3c2734
SHA512

d0188bbe019ff72054fefce07749e0e6a556304d0713e306f0ae123b0d821734ea0fb9b559f6aa6e2ab9cb904617e38703ac2d8565586b6cc16bace9a3fe374f
SSDEEP

12288:+DtZr4wimbK4L+C60UHum+1jn3OJZXaQ986RIM:+DLMwX2uMpa1j+J0zDM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7851e2cf7b829b306a9c542c0b3dbc3d_JaffaCakes118

Files

7851e2cf7b829b306a9c542c0b3dbc3d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2540b7049b6652a56623eb562d10e7eb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

WSANtohs
gethostname
gethostbyaddr
WSAAsyncGetServByPort
select
WSALookupServiceNextW
WSAInstallServiceClassW

kernel32

SetFileAttributesA
GetVersion
WritePrivateProfileStringA
RemoveDirectoryA
CancelIo
GetTempPathW
GetSystemDefaultLangID
CompareStringA
ExitProcess
lstrcpynA
InitializeCriticalSection
GetCurrentDirectoryW
ClearCommBreak
GetSystemTimeAdjustment
FindNextChangeNotification
CreateWaitableTimerA
PurgeComm
SetHandleCount
GetFullPathNameA
FormatMessageA
VirtualQueryEx
lstrcatW
GlobalFlags
TryEnterCriticalSection
ExpandEnvironmentStringsW
OpenMutexA
GetAtomNameA
QueryDosDeviceW
IsBadWritePtr
GetSystemTimeAsFileTime
DeleteCriticalSection
WriteProcessMemory
ReadConsoleOutputA
SetProcessShutdownParameters
OutputDebugStringW
LoadResource
PeekNamedPipe
GetOEMCP
GetSystemInfo
FlushFileBuffers
SystemTimeToFileTime
GetProcessHeap
RaiseException
CompareStringW
EnumCalendarInfoW
FlushConsoleInputBuffer
WriteConsoleOutputW
GetProcessTimes
GetFileType
SetProcessWorkingSetSize
GetCurrentProcessId
PulseEvent
WritePrivateProfileSectionW
SetSystemTime
IsBadStringPtrA

user32

CharToOemBuffA
OemToCharBuffW
CreatePopupMenu
GetNextDlgGroupItem
CopyAcceleratorTableW
DestroyWindow
AdjustWindowRect
PtInRect
MapWindowPoints
RemovePropW
TabbedTextOutW
SetTimer
LoadCursorW
SetDlgItemTextW
GetScrollRange
GetCursor
MapDialogRect
ExcludeUpdateRgn
GetMessagePos
GetDesktopWindow
EnumChildWindows

oleaut32

SafeArrayPutElement
SafeArrayUnaccessData

msvcrt

_strrev
localeconv
_wtoi
_chsize
atoi
_controlfp
fwprintf

Sections

.text
Size: 10KB - Virtual size: 226KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 261KB - Virtual size: 260KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2540b7049b6652a56623eb562d10e7eb

Headers

File Characteristics

Imports

ws2_32

kernel32

user32

oleaut32

msvcrt

Sections

.text Size: 10KB - Virtual size: 226KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 261KB - Virtual size: 260KB

.rsrc Size: 16KB - Virtual size: 16KB

.text
Size: 10KB - Virtual size: 226KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 261KB - Virtual size: 260KB

.rsrc
Size: 16KB - Virtual size: 16KB