8904c3761aae9edd81a7429a8b9c5327_JaffaCakes118

General

Target

8904c3761aae9edd81a7429a8b9c5327_JaffaCakes118
Size

40KB
MD5

8904c3761aae9edd81a7429a8b9c5327
SHA1

3dbbf0c85d1df4297801b1bf4c5a56ca3e26af1b
SHA256

40e245f70f300f7bdd09be7d18359fb923ee6bd4b0cdce8f6b8f26e21ad5b939
SHA512

498a4ecea49f9903a03fa14268aa3a50ecb5f63f4b5676efed3858cf48b4afead7ac885d56c91e34366afc99300be51c4551c4774aafded994f02ff6db9774b0
SSDEEP

768:Veb4oUeIkio0H10fiHTUqiO5OyjtfMc4I6Qn:39kio5fiUgOyjCS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8904c3761aae9edd81a7429a8b9c5327_JaffaCakes118

Files

8904c3761aae9edd81a7429a8b9c5327_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9603d079c8174549e27e979e1b0f41eb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntdll

RtlFreeHeap
RtlAllocateHeap
wcscpy
wcscat
wcslen
_wcsnicmp
swprintf

rapi

CeGetVersionEx
CeGetSystemInfo
CeRapiUninit
CeRapiInitEx
CeCloseHandle
CeWriteFile
CeCreateFile
CeGetFileAttributes
CeCreateProcess
CeRapiFreeBuffer
CeFindAllFiles

msvcrt

_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp

wsock32

WSAStartup
WSACleanup
socket
htonl
htons
bind
listen
accept
setsockopt
recv
send
WSAGetLastError

kernel32

GetStartupInfoA
GetModuleHandleA
FindFirstFileW
FindClose
CreateFileW
ReadFile
WaitForSingleObject
CreateThread
CloseHandle
LocalFree
LocalAlloc
OutputDebugStringW
GetLastError

gdi32

GetStockObject
StretchDIBits

user32

GetClientRect
GetWindowRect
SetWindowPos
DestroyWindow
CheckMenuItem
PostQuitMessage
EndPaint
CreateWindowExW
BeginPaint
RegisterClassW
LoadCursorW
UpdateWindow
ShowWindow
LoadMenuW
GetDC
SetWindowTextW
wsprintfW
DispatchMessageW
TranslateMessage
GetMessageW
MessageBoxW
wvsprintfW
DefWindowProcW

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 29KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rbrglor
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

9603d079c8174549e27e979e1b0f41eb

Headers

File Characteristics

Imports

ntdll

rapi

msvcrt

wsock32

kernel32

gdi32

user32

Sections

.text Size: 10KB - Virtual size: 9KB

.data Size: 512B - Virtual size: 1KB

.rsrc Size: 29KB - Virtual size: 30KB

rbrglor Size: - Virtual size: 4KB

.text
Size: 10KB - Virtual size: 9KB

.data
Size: 512B - Virtual size: 1KB

.rsrc
Size: 29KB - Virtual size: 30KB

rbrglor
Size: - Virtual size: 4KB