859d5be4971a7cdcdd345784fb2cb530_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

859d5be4971a7cdcdd345784fb2cb530_JaffaCakes118
Size

48KB
MD5

859d5be4971a7cdcdd345784fb2cb530
SHA1

06eb915174bde58be6f8b1c7307c36d24d67f723
SHA256

f24576d5d7969b68bf96ceccaa7fef4605e215692d37505d476a31361b3e9ad1
SHA512

cb1481259097ec63c1d9815e6570014fa680bfdbfc0ed5f85361124b5b057a2af62f56c5ac9f26e0b31f6385a16baa0b8648d6abc7051cba5bf2c35877ca29e3
SSDEEP

768:eQlwAl57WUtrPE3jBdPUgpPuz4d44PFC5:euWU5PEN5lmUbM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
859d5be4971a7cdcdd345784fb2cb530_JaffaCakes118

Files

859d5be4971a7cdcdd345784fb2cb530_JaffaCakes118
.exe windows:4 windows x86 arch:x86

152a232a7b11139d3cb8225996297cc6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentThread
SetPriorityClass
GetCurrentProcess
lstrcatA
lstrcpyA
GetEnvironmentVariableA
GetShortPathNameA
SetThreadPriority
SetFilePointer
CreateFileA
GetLastError
CopyFileA
GetSystemDirectoryA
GetModuleHandleA
GetStartupInfoA
CreateProcessA
ResumeThread
GetVersionExA
GlobalMemoryStatusEx
GetModuleFileNameA
DeleteFileA
WaitForSingleObject
lstrlenA
OutputDebugStringA
CreateThread
TerminateThread
CloseHandle
ExitThread
ReadFile
Sleep

user32

wsprintfA

advapi32

StartServiceA
RegOpenKeyA
RegSetValueExA
CloseServiceHandle
StartServiceCtrlDispatcherA
RegisterServiceCtrlHandlerA
SetServiceStatus
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
OpenSCManagerA
OpenServiceA
DeleteService
CreateServiceA

mfc42

ord825
ord823
ord800
ord4160
ord540
ord4129
ord6648
ord2764
ord537
ord2915
ord2818
ord6282
ord2846

msvcrt

_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
__setusermatherr
_initterm
__getmainargs
_acmdln
_exit
_onexit
__dllonexit
strncmp
exit
memchr
memmove
strtok
__CxxFrameHandler
strchr
rand
sprintf
strstr
atoi
time
srand
_XcptFilter
_except_handler3

msvcp60

??0_Winit@std@@QAE@XZ
??1Init@ios_base@std@@QAE@XZ
??0Init@ios_base@std@@QAE@XZ
?_Split@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
?_Xlen@std@@YAXXZ
?_Copy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDABV?$allocator@D@1@@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
??1_Winit@std@@QAE@XZ
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?_Xran@std@@YAXXZ
?_Freeze@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ

ws2_32

inet_addr
htons
closesocket
recv
send
socket
__WSAFDIsSet
select
gethostbyname
WSAStartup
connect
WSAGetLastError

Sections

.text
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

152a232a7b11139d3cb8225996297cc6

Headers

File Characteristics

Imports

kernel32

user32

advapi32

mfc42

msvcrt

msvcp60

ws2_32

Sections

.text Size: 28KB - Virtual size: 26KB

.rdata Size: 8KB - Virtual size: 4KB

.data Size: 4KB - Virtual size: 4KB

.rsrc Size: 4KB - Virtual size: 160B

.text
Size: 28KB - Virtual size: 26KB

.rdata
Size: 8KB - Virtual size: 4KB

.data
Size: 4KB - Virtual size: 4KB

.rsrc
Size: 4KB - Virtual size: 160B