82b5952a710aa2880b6e977b8621725a_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

82b5952a710aa2880b6e977b8621725a_JaffaCakes118
Size

255KB
MD5

82b5952a710aa2880b6e977b8621725a
SHA1

850e2046e306d04fbb620b170bf98856f93028da
SHA256

e45d4f2311511f39f049e6e26a462a6904e00b7b5c6182e35aed165df6f3ae8b
SHA512

61551e7066327b20e2210143e6b810120a84f60b3c0648f4d565242ac8d4517b9db9b37216ba3263eb4bcd692c10a0da2172ec9a811c2e4b354cf06a98573ab5
SSDEEP

6144:4/z6Hz/CIR1WAXhDhCs8C1ZznbNKLW7Mh5urYvi8V2IVO2Mjx6s+:9Hz/CIvWAtEsrLjbNF7Mh50MMjcs+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
82b5952a710aa2880b6e977b8621725a_JaffaCakes118

Files

82b5952a710aa2880b6e977b8621725a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ca2c03a3148d228cc6256590c3ae5144

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

wsock32

WSASetLastError
setsockopt
getsockopt
bind
getsockname
WSAStartup
WSACleanup
gethostbyname
ntohs
inet_addr
select
recv
__WSAFDIsSet
ntohl
socket
connect
WSAGetLastError
inet_ntoa
htons
htonl
gethostname
ioctlsocket
closesocket
send

kernel32

GetEnvironmentStringsW
SetCurrentDirectoryA
GetCurrentDirectoryA
GetFullPathNameA
GetModuleFileNameA
GetLastError
FreeLibrary
LoadLibraryA
Sleep
WaitForSingleObject
InitializeCriticalSection
GetVersion
GetWindowsDirectoryA
GetSystemDirectoryA
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
CreateMutexA
CreateEventA
SetEvent
SleepEx
DuplicateHandle
GetCurrentProcess
WaitForMultipleObjects
GetExitCodeThread
ExpandEnvironmentStringsA
GetSystemTime
CreateSemaphoreA
GetProcessHeap
GetLocaleInfoW
QueryPerformanceFrequency
GetStringTypeW
GetStringTypeA
IsValidLocale
SetUnhandledExceptionFilter
IsDebuggerPresent
RaiseException
RemoveDirectoryA
GetModuleHandleW
ExitProcess
MoveFileA
GetTimeFormatA
GetDateFormatA
FileTimeToSystemTime
FileTimeToLocalFileTime
GetCurrentProcessId
Beep
CreateDirectoryA
CreatePipe
TlsAlloc
GetCurrentThread
GetModuleHandleA
MultiByteToWideChar
GetStartupInfoA
FatalAppExitA
HeapCreate
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetFileAttributesA
GetExitCodeProcess
GetUserDefaultLCID
GetLocaleInfoA
lstrcmpA
GetProcAddress

advapi32

DeregisterEventSource
RegisterEventSourceA
RegEnumKeyExA
RegOpenKeyExA
RegCloseKey
RegQueryValueExA
ReportEventA

mapistub

MAPIInitialize
FixMAPI
MAPILogon
ScMAPIXFromCMC
BMAPISendMail
PRProviderInit
MAPISendDocuments
MAPILogonEx
BMAPIGetReadMail

kbdbu

KbdLayerDescriptor

Sections

.icode
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 151KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 11KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 93KB - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 203KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 124KB - Virtual size: 138KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ca2c03a3148d228cc6256590c3ae5144

Headers

File Characteristics

Imports

wsock32

kernel32

advapi32

mapistub

kbdbu

Sections

.icode Size: 8KB - Virtual size: 8KB

.edata Size: 512B - Virtual size: 151KB

.text Size: 11KB - Virtual size: 12KB

.rdata Size: 3KB - Virtual size: 26KB

.edata Size: 93KB - Virtual size: 107KB

.data Size: 6KB - Virtual size: 203KB

.edata Size: 124KB - Virtual size: 138KB

.rsrc Size: 7KB - Virtual size: 6KB

.icode
Size: 8KB - Virtual size: 8KB

.edata
Size: 512B - Virtual size: 151KB

.text
Size: 11KB - Virtual size: 12KB

.rdata
Size: 3KB - Virtual size: 26KB

.edata
Size: 93KB - Virtual size: 107KB

.data
Size: 6KB - Virtual size: 203KB

.edata
Size: 124KB - Virtual size: 138KB

.rsrc
Size: 7KB - Virtual size: 6KB