8584f06be2e7b157fc91417eb9735d71_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

8584f06be2e7b157fc91417eb9735d71_JaffaCakes118
Size

31KB
MD5

8584f06be2e7b157fc91417eb9735d71
SHA1

b9ba3236eaf122461c435b185525e76e37d2c02e
SHA256

c1fba52cb708cef1dae6c378641d629ca8ea408198a36205ee1bc2509d0ed6f2
SHA512

4dd5e48f8dc571f72c21104c3b687082c8493e65c86518fe731145a8e95d1926c590d22f0db77977f773ed95b1bd004d1a5f1c4cd7bd4a9baff573e01c169df2
SSDEEP

768:Dm7de6w4WA7bfLroweUP884s8MxtDP3d1:+de6wMDrowcmtDPT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8584f06be2e7b157fc91417eb9735d71_JaffaCakes118

Files

8584f06be2e7b157fc91417eb9735d71_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7cf0a4e3727b6b559623e35400958899

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

gethostbyname
connect
socket
htons
send
select
ioctlsocket
inet_addr
gethostname
WSAStartup
inet_ntoa
WSACleanup
closesocket
recv

shell32

ShellExecuteA

advapi32

RegCreateKeyA
RegSetValueExA
RegCloseKey
RegCreateKeyExA

kernel32

LocalFree
FlushFileBuffers
SetStdHandle
LoadLibraryA
RaiseException
GetACP
GetCPInfo
GetStringTypeW
GetStringTypeA
GetEnvironmentStrings
FreeEnvironmentStringsW
SetUnhandledExceptionFilter
IsBadCodePtr
GetOEMCP
ExitProcess
Sleep
GetLastError
GetModuleHandleA
GetCurrentProcess
GetProcAddress
GetTempPathA
GetTickCount
ExitThread
GetDriveTypeA
GetLogicalDriveStringsA
WritePrivateProfileStringA
GetPrivateProfileStringA
CopyFileA
GetModuleFileNameA
CreateThread
SetFileAttributesA
ExpandEnvironmentStringsA
CreateMutexA
GetSystemDefaultLangID
GlobalUnlock
GlobalLock
GlobalAlloc
GlobalFree
WinExec
lstrcatA
lstrlenA
CloseHandle
CreateFileA
GetSystemDirectoryA
GetVersionExA
GetLocaleInfoA
FreeEnvironmentStringsA
UnhandledExceptionFilter
TerminateProcess
HeapReAlloc
VirtualAlloc
HeapFree
VirtualFree
HeapCreate
HeapDestroy
LCMapStringW
LCMapStringA
MultiByteToWideChar
SetFilePointer
WriteFile
RtlUnwind
GetFileType
GetStdHandle
SetHandleCount
WideCharToMultiByte
GetVersion
GetCommandLineA
GetStartupInfoA
HeapAlloc
GetEnvironmentStringsW

user32

keybd_event
SetFocus
ShowWindow
BlockInput
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
FindWindowA
VkKeyScanA
wsprintfA
SetForegroundWindow

urlmon

URLDownloadToFileA

ole32

CoInitialize
CoUninitialize
CoCreateInstance

oleaut32

VariantClear
SysAllocString
VariantInit

Sections

.text
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

7cf0a4e3727b6b559623e35400958899

Headers

File Characteristics

Imports

ws2_32

shell32

advapi32

kernel32

user32

urlmon

ole32

oleaut32

Sections

.text Size: 22KB - Virtual size: 22KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 4KB - Virtual size: 12KB

.text
Size: 22KB - Virtual size: 22KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 4KB - Virtual size: 12KB