791063640983078e5c875f6b357467ad_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

791063640983078e5c875f6b357467ad_JaffaCakes118
Size

144KB
MD5

791063640983078e5c875f6b357467ad
SHA1

e75da261677792cbaf78d4c03698a84ca3553c0e
SHA256

0b1d82f28ece6ac2e152cd6310b837cba5eb786e077ee64f0862b860da61b82a
SHA512

efa7d3b17e38291c5960278e61978fb023609cfe940b7ffaba586ffd0363d7c91251423806d2caef5a4bfb6847e5e82ac2d14bd635a6d92da7b51ed85323c629
SSDEEP

3072:r2xWeXwpbEe654oeFCcXzb8xtMjGKCN8l8:uWnpbEe65ReFCk0xaxCNJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
791063640983078e5c875f6b357467ad_JaffaCakes118

Files

791063640983078e5c875f6b357467ad_JaffaCakes118
.exe windows:4 windows x86 arch:x86

625c8618ceece0b1a497b7e96890065d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

recv
send
htons
ioctlsocket
bind
listen
accept
WSAGetLastError
closesocket
socket
WSACleanup
WSAStartup

kernel32

ReadFile
GetLocaleInfoW
LoadLibraryA
SetStdHandle
GetOEMCP
GetACP
SetFilePointer
FlushFileBuffers
IsBadCodePtr
IsBadReadPtr
GetTickCount
GetVersion
SetEndOfFile
GetModuleFileNameA
GetWindowsDirectoryA
Sleep
DeleteFileA
WaitForSingleObject
CloseHandle
CreateProcessA
OpenProcess
GetCurrentProcessId
CreateFileA
GetTempFileNameA
GetTempPathA
QueryPerformanceCounter
IsValidCodePage
CopyFileA
GetStartupInfoA
IsValidLocale
EnumSystemLocalesA
InterlockedDecrement
InterlockedIncrement
WideCharToMultiByte
InterlockedExchange
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
RtlUnwind
RaiseException
ExitProcess
GetProcAddress
GetModuleHandleA
TerminateProcess
GetCurrentProcess
HeapFree
GetSystemTimeAsFileTime
ExitThread
GetCurrentThreadId
GetLastError
CreateThread
GetCommandLineA
GetVersionExA
HeapAlloc
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetCPInfo
TlsAlloc
SetLastError
TlsFree
TlsSetValue
TlsGetValue
SetUnhandledExceptionFilter
HeapReAlloc
HeapSize
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
UnhandledExceptionFilter
WriteFile
GetStdHandle
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetLocaleInfoA
VirtualProtect
GetSystemInfo
VirtualQuery
GetStringTypeA
GetStringTypeW
GetUserDefaultLCID

user32

wsprintfA

advapi32

RegSetValueExA
RegCloseKey
RegOpenKeyExA

shell32

SHGetSpecialFolderPathA

Sections

.text
Size: 108KB - Virtual size: 105KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

625c8618ceece0b1a497b7e96890065d

Headers

File Characteristics

Imports

ws2_32

kernel32

user32

advapi32

shell32

Sections

.text Size: 108KB - Virtual size: 105KB

.rdata Size: 24KB - Virtual size: 21KB

.data Size: 8KB - Virtual size: 11KB

.text
Size: 108KB - Virtual size: 105KB

.rdata
Size: 24KB - Virtual size: 21KB

.data
Size: 8KB - Virtual size: 11KB